Fast Go-based XSS assessment toolkit
☆20Mar 18, 2026Updated 7 months ago
Alternatives and similar repositories for xspulse
Users that are interested in xspulse are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Advanced Attack Surface Mapper & Automated PDF Reporting☆32Jun 30, 2026Updated 4 months ago
- 🔐 Chrome Extension - Detect hardcoded tokens, API keys & secrets in JavaScript files☆54Dec 15, 2025Updated 10 months ago
- ☆16Jun 14, 2026Updated 5 months ago
- ☆11Sep 26, 2025Updated last year
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ⚔️ Slays exposed .git repos even when /.git/ returns 403. Dumps config, HEAD, logs, index and full history over HTTP, rebuilding the sour…☆14Sep 21, 2026Updated last month
- BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!☆30Feb 10, 2024Updated 2 years ago
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆35Feb 5, 2026Updated 9 months ago
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆36Jul 24, 2026Updated 3 months ago
- Blind XSS SVG☆10Updated this week
- ☆13Mar 6, 2025Updated last year
- A simple bug bounty utility tool to remove uninteresting entries from a list of URLs.☆13Jul 22, 2024Updated 2 years ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- burpsuite extension to analyze javascript files using semgrep☆13Feb 3, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- Hacker themed Hugo theme based on Nivenly.com☆16Feb 2, 2022Updated 4 years ago
- ScopeSentry Plugin Market☆15Apr 20, 2025Updated last year
- Many yaml scanner plugin parser [nuclei-template, xray-poc, ez-poc] - for Python☆14Mar 27, 2022Updated 4 years ago
- RSS订阅-安全信息流☆34Sep 16, 2024Updated 2 years ago
- 白盒审计工具&渗透测试工具：1.输入源码文件物理路径2.输入测试网站地址3.自动爬取源码中的所有文件名以及相对路径4.保存相对路径，制作URL字典5.使用制作的字典，逐一访问测试网站6.得到不要验证cookie的页面，进行进一步审计或测试☆11Oct 31, 2021Updated 5 years ago
- pdf-js-inject，能够将js代码注入到pdf文件中,也可以注入xss-payload到pdf文件中☆31Sep 8, 2024Updated 2 years ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- My-custom-sensitive-info-disclsure-nuclei-template☆34Jan 3, 2026Updated 10 months ago
- ☆16Nov 2, 2026Updated last week
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆64Jul 12, 2026Updated 4 months ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- Passively check for XSS character encodings☆19Mar 9, 2026Updated 8 months ago
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- A powerful and clean bash script to dump and extract information from Project Discovery's Chaos Project https://chaos.projectdiscovery.io…☆25Mar 31, 2022Updated 4 years ago
- FortiSandbox RCE Scanner — CVE-2026-39808☆26Apr 21, 2026Updated 6 months ago
- Automatic SQL injection and database takeover tool☆43Nov 27, 2025Updated 11 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆48Mar 4, 2024Updated 2 years ago
- JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持…☆49Updated this week
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated 3 months ago
- One-Click Subdomain Finder – Fast, lightweight browser bookmarklet for subdomain discovery.☆19Aug 3, 2025Updated last year
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆15Aug 14, 2026Updated 3 months ago
- aplikasi surat menyurat☆11Jan 3, 2023Updated 3 years ago
- A complete security assessment tool that supports common web security issues scanning and custom POC | Be sure to read the document befor…☆20Sep 27, 2024Updated 2 years ago
Are these results useful?