PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]
☆51Feb 17, 2023Updated 3 years ago
Alternatives and similar repositories for webjars-swagger-xss
Users that are interested in webjars-swagger-xss are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.☆252Oct 22, 2026Updated last week
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- ☆253May 25, 2021Updated 5 years ago
- 一个用于修改右键插件菜单层级的Burpsuite插件。A simple BurpSuite extension to change extension context menu level.☆14Jan 15, 2024Updated 2 years ago
- A proof of concept program that pulls and parses security.txt files at mass.☆30May 31, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- i will upload more templates here to share with the comunity.☆573Apr 17, 2024Updated 2 years ago
- fAllParams is a powerful tool for extracting all parameters from given URLs.☆33Jul 7, 2023Updated 3 years ago
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- A lightweight version of my bug bounty hunting framework designed to be run on Synack's LP+ machines.☆11Jul 11, 2023Updated 3 years ago
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Jan 2, 2025Updated last year
- output burp body only and auto pretiffy☆22May 1, 2025Updated last year
- ☆958Dec 26, 2025Updated 10 months ago
- ☆64Mar 1, 2023Updated 3 years ago
- Burp Extender, ssrf scanner, 自动扫描ssrf漏洞☆46Mar 31, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Online-Crawler-Wayback-Machine☆27Oct 15, 2024Updated 2 years ago
- Tool for collect subdomains from different websites but the unique in tool collect subdomains from subdomainfinder.c99 and collect all su…☆26Feb 5, 2023Updated 3 years ago
- Automated HTTP Request Repeating With Burp Suite☆38Apr 3, 2023Updated 3 years ago
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.☆259Feb 10, 2025Updated last year
- ☆46Sep 20, 2024Updated 2 years ago
- This repository contains random Nuclei templates I've created. Most of them based on recent security issues and exploits.☆18May 21, 2024Updated 2 years ago
- ☆36Aug 2, 2022Updated 4 years ago
- The OWASP Testing Guide v4.2 Checlist [2023]☆13Jan 15, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- commands☆27Nov 5, 2020Updated 5 years ago
- Burp Extension that copies a request and builds a FFUF skeleton☆114Sep 29, 2023Updated 3 years ago
- VM Escape for Parallels Desktop <18.1.1☆37May 7, 2023Updated 3 years ago
- JIRA"YA is a vulnerability analyzer for JIRA instances. It runs active scans to identify vulnerabilities by interacting with the host and…☆40Aug 23, 2024Updated 2 years ago
- These Repositories About My Recon Methodology To Give Some Idea For Other Hunter How To Do Recon☆48Oct 15, 2022Updated 4 years ago
- XSS payloads for bypassing WAF. This repository is updating continuously.☆10Aug 8, 2021Updated 5 years ago
- A python script to scan for Apache Tomcat server vulnerabilities.☆894Jan 12, 2026Updated 9 months ago
- A Ruby micro-framework for writing and running exploit payloads☆23Jan 16, 2026Updated 9 months ago
- 1337 Wordlists for Bug Bounty Hunting☆988Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Ultimate Wordlist for Web Content Discovery☆73Apr 28, 2025Updated last year
- A simple utility to perform reverse WHOIS lookups using whoisxml API☆49Aug 9, 2023Updated 3 years ago
- ☆29Jul 26, 2023Updated 3 years ago
- XSS scanner tool to scan a list of URLs provided in a .txt file for reflected XSS(rxss) vulnerabilities. This tool is designed to efficie…☆14Jun 29, 2024Updated 2 years ago
- Looking for JAR files that are vulnerable to Log4j RCE (CVE‐2021‐44228)?☆44Mar 2, 2022Updated 4 years ago
- My Priv8 Nuclei Templates☆345May 12, 2024Updated 2 years ago
- Tools for bug bounty☆29Jul 9, 2025Updated last year