Alternatives and similar repositories for AwesomeXSS:

Users that are interested in AwesomeXSS are comparing it to the libraries listed below

• s0md3v / Arjun
  HTTP parameter discovery suite.
  ☆5,508Updated last month
• snoopysecurity / awesome-burp-extensions
  A curated list of amazingly awesome Burp Extensions
  ☆3,096Updated last month
• almandin / fuxploider
  File upload vulnerability scanner and exploitation tool.
  ☆3,172Updated last year
• j3ssie / osmedeus
  A Workflow Engine for Offensive Security
  ☆5,512Updated last month
• EdOverflow / bugbounty-cheatsheet
  A list of interesting payloads, tips and tricks for bug bounty hunters.
  ☆6,052Updated last year
• s0md3v / XSStrike
  Most advanced XSS scanner.
  ☆13,709Updated this week
• michenriksen / aquatone
  A Tool for Domain Flyovers
  ☆5,733Updated 2 years ago
• payloadbox / xss-payload-list
  🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
  ☆6,802Updated 8 months ago
• ngalongc / bug-bounty-reference
  Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
  ☆3,826Updated 7 months ago
• 0xInfection / Awesome-WAF
  🔥 Web-application firewalls (WAFs) from security standpoint.
  ☆6,543Updated 4 months ago
• 1N3 / IntruderPayloads
  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…
  ☆3,756Updated 3 years ago
• terjanq / Tiny-XSS-Payloads
  A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
  ☆2,051Updated 3 months ago
• EdOverflow / can-i-take-over-xyz
  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
  ☆5,064Updated last month
• GerbenJavado / LinkFinder
  A python script that finds endpoints in JavaScript files
  ☆3,859Updated 11 months ago
• swisskyrepo / SSRFmap
  Automatic SSRF fuzzer and exploitation tool
  ☆3,117Updated 3 weeks ago
• epinna / tplmap
  Server-Side Template Injection and Code Injection Detection and Exploitation Tool
  ☆3,890Updated 10 months ago
• gwen001 / pentest-tools
  A collection of custom security tools for quick needs.
  ☆3,179Updated last year
• foospidy / payloads
  Git All the Payloads! A collection of web attack payloads.
  ☆3,694Updated last year
• Findomain / Findomain
  The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, su…
  ☆3,425Updated last year
• hahwul / dalfox
  🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
  ☆4,014Updated this week
• 0xSobky / HackVault
  A container repository for my public web hacks!
  ☆1,977Updated 2 years ago
• xmendez / wfuzz
  Web application fuzzer
  ☆6,100Updated 7 months ago
• cujanovic / SSRF-Testing
  SSRF (Server Side Request Forgery) testing resources
  ☆2,393Updated 5 months ago
• hakluke / hakrawler
  Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
  ☆4,624Updated 2 months ago
• ticarpi / jwt_tool
  A toolkit for testing, tweaking and cracking JSON Web Tokens
  ☆5,664Updated 7 months ago
• streaak / keyhacks
  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
  ☆5,376Updated 7 months ago
• nahamsec / lazyrecon
  This script is intended to automate your reconnaissance process in an organized fashion
  ☆1,956Updated 3 years ago
• devanshbatham / ParamSpider
  Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
  ☆2,653Updated 8 months ago
• codingo / NoSQLMap
  Automated NoSQL database enumeration and web application exploitation tool.
  ☆3,023Updated 7 months ago
• projectdiscovery / subfinder
  Fast passive subdomain enumeration tool.
  ☆11,336Updated last week