s0md3v / Corsy
CORS Misconfiguration Scanner
☆1,372Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for Corsy
- The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.☆1,107Updated 2 weeks ago
- Making Favicon.ico based Recon Great again !☆1,123Updated last year
- Fetch many paths for many hosts - without killing the hosts☆1,600Updated 9 months ago
- Subdomain Takeover tool written in Go☆1,909Updated last year
- Subdomain takeover vulnerability checker☆1,052Updated last month
- BBT - Bug Bounty Tools (examples💡)☆1,715Updated 7 months ago
- MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering…☆1,321Updated this week
- A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.☆1,729Updated 5 months ago
- A wrapper around grep, to help you grep for things☆1,815Updated 5 months ago
- A fast DOM based XSS vulnerability scanner with simplicity.☆767Updated 2 years ago
- XSS payloads designed to turn alert(1) into P1☆1,339Updated last year
- ☆1,236Updated 2 weeks ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆1,813Updated 10 months ago
- Subdomain and target enumeration tool built for offensive security testing☆819Updated 4 months ago
- Fetches javascript file from a list of URLS or subdomains.☆738Updated last year
- Open Redirection Analyzer☆752Updated last year
- A fast tool to scan CRLF vulnerability written in Go☆1,333Updated last week
- GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)☆1,382Updated 7 months ago
- OSINT tools and more but without API key☆1,246Updated 6 months ago
- Generates combination of domain names from the provided input.☆900Updated 4 months ago
- List of XSS Vectors/Payloads☆1,181Updated 2 months ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆2,513Updated 4 months ago
- Automation for javascript recon in bug bounty.☆897Updated last year
- The Swiss Army knife for automated Web Application Testing☆2,164Updated 6 months ago
- An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…☆777Updated last year
- Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hu…☆2,002Updated 4 months ago
- Local file inclusion exploitation tool☆787Updated last year
- Mass scan IPs for vulnerable services☆1,024Updated 2 years ago
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,211Updated last month