Alternatives and similar repositories for wafer:

Users that are interested in wafer are comparing it to the libraries listed below

• 0x999-x / jsluicepp
  jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
  ☆267Updated 11 months ago
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆285Updated last year
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆236Updated last month
• ngalongc / AuthzAI
  ☆166Updated 5 months ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆343Updated 4 months ago
• devanshbatham / headerpwn
  A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
  ☆332Updated last year
• codingo / dorky
  A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon
  ☆234Updated last year
• Proviesec / PSFuzz
  Proviesec Fuzz Scanner - dir/path web scanner
  ☆100Updated 3 months ago
• Moopinger / smugglefuzz
  A rapid HTTP downgrade smuggling scanner written in Go.
  ☆253Updated 10 months ago
• midoxnet / mapperplus
  MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.
  ☆170Updated 5 months ago
• rs-loves-bugs / xsshunter
  ☆168Updated last month
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆626Updated last year
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆607Updated last week
• cosad3s / postleaks
  Search for sensitive data in Postman public library.
  ☆202Updated 2 months ago
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆155Updated 3 months ago
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆283Updated 4 months ago
• edoardottt / pphack
  The Most Advanced Client-Side Prototype Pollution Scanner
  ☆179Updated this week
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆180Updated this week
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆301Updated 4 months ago
• Net-hunter121 / API-Wordlist
  ☆237Updated 3 years ago
• doyensec / CSPTBurpExtension
  CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.
  ☆133Updated 8 months ago
• xnl-h4ck3r / knoxnl
  This is a python wrapper around the amazing KNOXSS API by Brute Logic
  ☆254Updated 2 weeks ago
• nullenc0de / gofuzz
  ☆166Updated 6 months ago
• xnl-h4ck3r / urless
  De-clutter a list of URLs
  ☆328Updated 4 months ago
• az7rb / crt.sh
  Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.
  ☆214Updated 6 months ago
• BugBountyzip / Bambdas
  ☆130Updated 4 months ago
• jhaddix / awsScrape
  A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.
  ☆230Updated last year
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆367Updated this week
• AethliosIK / reset-tolkien
  Unsecure time-based secret exploitation and Sandwich attack implementation Resources
  ☆134Updated 3 months ago
• trickest / mkpath
  Make URL path combinations using a wordlist
  ☆173Updated last year