thehlopster / hfuzz
Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.
☆100Updated last month
Alternatives and similar repositories for hfuzz
Users that are interested in hfuzz are comparing it to the libraries listed below
Sorting:
- CVE Collection of jQuery UI XSS Payloads☆119Updated 2 years ago
- ☆132Updated 6 months ago
- A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing☆140Updated last year
- Simplify your life with leak detection in JavaScript. NipeJS streamlines the use of regex, making it effortless to uncover potential leak…☆94Updated 9 months ago
- ☆240Updated 3 years ago
- This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.☆243Updated last month
- CVE Collection of jQuery XSS Payloads☆71Updated 2 years ago
- A path-normalization pentesting tool.☆127Updated last year
- ☆68Updated 2 years ago
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆36Updated 10 months ago
- Self-hosted passive subdomain continous monitoring tool.☆162Updated last year
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆77Updated last year
- A Burp Suite extension to extract datas from source code while browsing.☆158Updated last year
- ☆119Updated last year
- Private Nuclei Templates☆99Updated 2 months ago
- Custom scan profiles for use with Burp Suite Pro☆143Updated last year
- Fetches JavaScript files quickly and comprehensively.☆123Updated 2 years ago
- BChecks collection for Burp Suite Professional☆98Updated 11 months ago
- Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the int…☆131Updated 5 months ago
- ☆58Updated 5 months ago
- A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API☆71Updated 3 months ago
- A collection of useful lists for Penetration Testing & Bug Bounty - Content Discovery, Payloads, Variables, Sandbox Escaping, etc☆103Updated 2 months ago
- Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.☆81Updated last year
- Go scanner to find web cache poisoning vulnerabilities in a list of URLs☆138Updated last year
- Make URL path combinations using a wordlist☆174Updated last year
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆81Updated 4 months ago
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆170Updated 7 months ago
- ☆68Updated last year
- Bypass 403 pages☆112Updated 10 months ago
- Mine URLs from Browser's Heap Snapshot for fun and profit☆63Updated last year