JSSCM detects expired domains for Stored XSS exploitation during browsing.
☆58Apr 3, 2025Updated last year
Alternatives and similar repositories for jsscm
Users that are interested in jsscm are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆30Oct 23, 2025Updated last year
- Results from analyzing data gathered from 1.6 billion subdomains☆32Oct 15, 2024Updated 2 years ago
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆65Jun 22, 2026Updated 4 months ago
- ☆97Apr 4, 2025Updated last year
- ☆17Jul 21, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- advance web crawler to crawl urls from website using python.☆10Apr 24, 2023Updated 3 years ago
- Burp Suite extension to detect Web Cache Deception vulnerabilities, now compatible with the Community Edition. Automates advanced cache …☆20Jun 11, 2026Updated 4 months ago
- This Chromium extension scans the page for external iFrames, Scripts, and Styles, logs them to the console, and checks if their domains a…☆68Jan 6, 2026Updated 10 months ago
- Extracts URLs from OSINT Archives for Security Insights☆194Updated this week
- Endpoint enumeration☆11Apr 1, 2022Updated 4 years ago
- ☆37Oct 16, 2025Updated last year
- 🐛 A list of writeups from the MSRC (Microsoft) Bug Bounty program☆77Updated this week
- Scan websites for exposed Supabase JWTs, enumerate accessible tables, and detect sensitive data exposure automatically.☆128Dec 29, 2025Updated 10 months ago
- ai-based domain name generation☆149May 7, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- collectvars collects JavaScript variables, highlights risky ones, and helps you understand code structure, while you casually browse.☆35Aug 28, 2024Updated 2 years ago
- a recon framework that facilitates discovering, scanning and monitoring assets trough a configurable engine running on serverless aws inf…☆11Aug 26, 2024Updated 2 years ago
- Unsecure time-based secret exploitation and Sandwich attack implementation Resources☆153Dec 9, 2024Updated last year
- A tool for adding new lines to files, skipping duplicates and written in Rust!☆22May 8, 2025Updated last year
- Contains nuclei templates for security testing and POCs.☆17Oct 19, 2024Updated 2 years ago
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- A resource for leveraging Windows and Sysmon event codes in threat hunting and incident response.☆27Sep 29, 2024Updated 2 years ago
- Burp suite extension to find sensitive information by checking incoming text OR binary websocket messages☆61Jul 17, 2026Updated 3 months ago
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆297Oct 5, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆178Oct 15, 2024Updated 2 years ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 4 months ago
- ☆12May 16, 2020Updated 6 years ago
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆147Jan 21, 2025Updated last year
- Steal Apache Solr instance Queries with or without a username and password.☆12May 10, 2021Updated 5 years ago
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.☆243Jul 24, 2025Updated last year
- Like DLP☆10Jan 27, 2025Updated last year
- Magento Security Scanner☆13Jan 10, 2022Updated 4 years ago
- jxscout superpowers JavaScript analysis for security researchers☆468Apr 12, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆92Sep 13, 2025Updated last year
- https://www.n00py.io/2020/05/extracting-files-from-burp-intruder-output/☆14Apr 25, 2025Updated last year
- Get URLs from the Wayback Machine. Able to handle large outputs.☆35Sep 15, 2023Updated 3 years ago
- All known and unknown public POC's for wordpress themes and plugins☆78Jun 23, 2021Updated 5 years ago
- Match & Replace rules for Portswigger's Burp that operate globally across all utilities.☆25Jan 26, 2026Updated 9 months ago
- Tool to fuzz for interesting vhost.☆22Jan 8, 2025Updated last year
- ☆958Dec 26, 2025Updated 10 months ago