Alternatives and similar repositories for HopLa:

Users that are interested in HopLa are comparing it to the libraries listed below

• ethicalhackingplayground / ssrf-king
  SSRF plugin for burp Automates SSRF Detection in all of the Request
  ☆566Updated 4 years ago
• projectdiscovery / nuclei-burp-plugin
  Nuclei plugin for BurpSuite
  ☆1,215Updated 5 months ago
• volkandindar / agartha
  A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations,…
  ☆360Updated 4 months ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆580Updated last year
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆846Updated 3 years ago
• musana / fuzzuli
  fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
  ☆793Updated last year
• qtc-de / remote-method-guesser
  Java RMI Vulnerability Scanner
  ☆851Updated 7 months ago
• InitRoot / BurpJSLinkFinder
  Burp Extension for a passive scanning JS files for endpoint links.
  ☆764Updated 10 months ago
• CoreyD97 / BurpCustomizer
  Because just a dark theme wasn't enough!
  ☆559Updated 2 months ago
• PortSwigger / autorize
  Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…
  ☆233Updated 2 months ago
• PortSwigger / BChecks
  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition
  ☆665Updated last week
• ThreatUnknown / jsubfinder
  jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).
  ☆267Updated last month
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆619Updated last year
• mdsecresearch / BurpSuiteSharpener
  ☆516Updated last year
• pyn3rd / Spring-Boot-Vulnerability
  ☆402Updated 3 years ago
• RapidDNS / Afuzz
  Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.
  ☆303Updated last year
• emadshanab / Nuclei-Templates-Collection
  Nuclei Templates Collection
  ☆948Updated 9 months ago
• laluka / jolokia-exploitation-toolkit
  jolokia-exploitation-toolkit
  ☆284Updated 2 months ago
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆347Updated 2 years ago
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆348Updated this week
• projectdiscovery / fuzzing-templates
  Community curated list of nuclei templates for finding "unknown" security vulnerabilities.
  ☆56Updated 9 months ago
• jas502n / Grafana-CVE-2021-43798
  Grafana Unauthorized arbitrary file reading vulnerability
  ☆355Updated 2 years ago
• qtc-de / beanshooter
  JMX enumeration and attacking tool.
  ☆417Updated 3 weeks ago
• allanlw / svg-cheatsheet
  A cheatsheet for exploiting server-side SVG processors.
  ☆713Updated 4 years ago
• anshumanpattnaik / http-request-smuggling
  HTTP Request Smuggling Detection Tool
  ☆485Updated last year
• xnl-h4ck3r / GAP-Burp-Extension
  Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist
  ☆1,306Updated 7 months ago
• p0dalirius / ApacheTomcatScanner
  A python script to scan for Apache Tomcat server vulnerabilities.
  ☆816Updated this week
• woodpecker-appstore / log4j-payload-generator
  Log4j jndi injects the Payload generator
  ☆487Updated 3 years ago
• zzzteph / probable_subdomains
  Subdomains analysis and generation tool. Reveal the hidden!
  ☆235Updated this week
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆595Updated 3 years ago