Alternatives and similar repositories for xssmap

Users that are interested in xssmap are comparing it to the libraries listed below

• ghostlulzhacks / waybackSqliScanner
  ☆196Updated 6 years ago
• zseano / JS-Scan
  a .js scanner, built in php. designed to scrape urls and other info
  ☆224Updated 8 years ago
• MichaelStott / CRLF-Injection-Scanner
  Command line tool for testing CRLF injection on a list of domains.
  ☆165Updated last year
• chrispetrou / FDsploit
  File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
  ☆273Updated 4 years ago
• cujanovic / CRLF-Injection-Payloads
  Payloads for CRLF Injection
  ☆225Updated last year
• jakejarvis / subtake
  Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.
  ☆147Updated 5 years ago
• dubs3c / Injectus
  CRLF and open redirect fuzzer
  ☆113Updated 4 years ago
• shiblisec / Rekon
  The project contains multiple shell scripts for automating the tasks during recon.
  ☆175Updated 2 years ago
• Damian89 / extended-xss-search
  A better version of my xssfinder tool - scans for different types of xss on a list of urls.
  ☆188Updated 6 years ago
• wish-i-was / femida
  Automated blind-xss search for Burp Suite
  ☆286Updated 6 years ago
• dark-warlord14 / JSScanner
  You can read the writeup on this script here
  ☆275Updated 5 years ago
• Shashank-In / TravisLeaks
  A tool to find sensitive keys and passwords in Travis logs
  ☆141Updated 4 years ago
• 0xbharath / censys-enumeration
  A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
  ☆152Updated 2 years ago
• antichown / subdomain-takeover
  Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
  ☆365Updated 2 years ago
• cujanovic / subdomain-bruteforce-list
  subdomain bruteforce list
  ☆102Updated last year
• 0xbharath / domains-from-csp
  A script to extract domain names from Content Security Policy(CSP) headers
  ☆112Updated 6 years ago
• vavkamil / XFFenum
  X-Forwarded-For [403 forbidden] enumeration
  ☆94Updated last year
• rastating / dnmasscan
  A script that can resolve an input file of domains and scan them with masscan
  ☆155Updated 5 years ago
• jakejarvis / bounty-domains
  List of domains in scope for bug bounties (HackerOne, Bugcrowd, etc.)
  ☆75Updated 4 years ago
• cujanovic / Content-Bruteforcing-Wordlist
  Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
  ☆215Updated last year
• tijme / angularjs-csti-scanner
  Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
  ☆325Updated 4 years ago
• ZephrFish / Wordlists
  Various Payload wordlists
  ☆236Updated 6 months ago
• dark-warlord14 / ffufplus
  You can read the writeup on this script here
  ☆194Updated 4 years ago
• BitTheByte / BitBlinder
  BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities
  ☆113Updated 2 years ago
• SpiderMate / B-XSSRF
  Toolkit to detect and keep track on Blind XSS, XXE & SSRF
  ☆292Updated 6 years ago
• In3tinct / See-SURF
  Python tool to find potential Server Side Reqest Forgery (SSRF) vulnerability parameters.
  ☆334Updated 2 months ago
• Mad-robot / Spartan
  My Recon Automation
  ☆193Updated 4 years ago
• LucaBongiorni / XSS.png
  A XSS mind map ;)
  ☆57Updated 9 years ago
• Cillian-Collins / subscraper
  Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomai…
  ☆223Updated 5 years ago
• PortSwigger / xss-validator
  This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
  ☆91Updated 3 years ago