swoops / eval_villain
A Firefox Web Extension to improve the discovery of DOM XSS.
☆272Updated 5 months ago
Alternatives and similar repositories for eval_villain:
Users that are interested in eval_villain are comparing it to the libraries listed below
- Burp extension to create target specific and tailored wordlist from burp history.☆237Updated 3 years ago
- Burpsuite plugin for Interact.sh☆218Updated 9 months ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆310Updated 5 months ago
- IIS shortname scanner written in Go☆328Updated 2 years ago
- Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations☆356Updated 4 years ago
- Unofficial documentation for the great tool Param Miner☆179Updated 2 years ago
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆259Updated 2 weeks ago
- Prototype pollution scanner using headless chrome☆217Updated 2 years ago
- Secret and/or credential patterns used for gf.☆241Updated 2 years ago
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆497Updated last month
- This tool use fuuzzing to try to bypass unknown authentication methods, who knows...☆247Updated 8 months ago
- A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate☆209Updated 9 months ago
- Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools☆273Updated 9 months ago
- A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way t…☆231Updated 3 years ago
- Customisable and automated HTTP header injection☆245Updated 9 months ago
- Nuclei templates written by us.☆268Updated 3 years ago
- Turbo Intruder Scripts☆221Updated 4 years ago
- PP-finder Help you find gadget for prototype pollution exploitation☆156Updated 8 months ago
- Turns any junk text into a usable wordlist for brute-forcing.☆219Updated last year
- List of fresh DNS resolvers updated daily☆109Updated 2 years ago
- ☆153Updated 2 years ago
- De-clutter a list of URLs☆334Updated 4 months ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆293Updated 6 months ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆631Updated last year
- Build your own reconnaissance system with Osmedeus Next Generation☆187Updated 2 months ago
- The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.☆357Updated last year
- 🐙 Cross-document messaging security research tool powered by https://enso.security☆288Updated last year
- A tool to check a bunch of URLs that contain reflecting params.☆568Updated 8 months ago
- Gotator is a tool to generate DNS wordlists through permutations.☆473Updated 2 years ago
- List of reporting templates I have used since I started doing BBH.☆293Updated 7 months ago