Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise false-positive filter. Part of TrinetLayer.
☆98Sep 10, 2026Updated last month
Alternatives and similar repositories for Ghost-Js-Burp-Extension
Users that are interested in Ghost-Js-Burp-Extension are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.☆38Oct 13, 2026Updated 3 weeks ago
- find sources and sinks from js files☆17Apr 4, 2026Updated 7 months ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 4 months ago
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated 4 months ago
- Collection of documentation, tools, and tips related to vulnerability research.☆279Sep 24, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.☆55Sep 28, 2026Updated last month
- A web security workbench built for AI agents.☆388Updated this week
- ☆18Sep 24, 2026Updated last month
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆63Jul 12, 2026Updated 3 months ago
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- A React/Next.js-aware secret hunter for single-page applications.☆20Sep 5, 2026Updated 2 months ago
- ☆50Aug 17, 2026Updated 2 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆35Jun 18, 2026Updated 4 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- Tool for fetching all the available waybackmachine snapshot urls☆27Oct 8, 2024Updated 2 years ago
- Generate wordlists using pattern logic and expressions.☆24Jun 18, 2026Updated 4 months ago
- Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-…☆1,006Updated this week
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex…☆186Jul 21, 2026Updated 3 months ago
- Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integrati…☆374Aug 15, 2026Updated 2 months ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆15Aug 14, 2026Updated 2 months ago
- ☆74Jul 15, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆16Jun 14, 2026Updated 4 months ago
- The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.☆135Updated this week
- Structured practice: Mainly PortSwigger lab writeups☆23Updated this week
- AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)☆465Oct 3, 2026Updated last month
- ☆53Aug 5, 2026Updated 3 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆79Aug 28, 2026Updated 2 months ago
- output burp body only and auto pretiffy☆22May 1, 2025Updated last year
- Claude-native, governed offensive-OSINT & external attack-surface platform for authorized red-team and bug-bounty. Multi-agent recon acro…☆15Sep 12, 2026Updated last month
- Google Gemini API key discovery and security scanning tool.☆43Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD…☆216Sep 25, 2026Updated last month
- rep+ — Burp-style HTTP Repeater for Firefox DevTools with built-in AI to explain requests and suggest attacks☆37Jan 8, 2026Updated 9 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- Black Box Dynamic Analysis Telegram Mini App Tool to detect Privacy Policy Violations☆19Oct 20, 2026Updated 2 weeks ago
- Some scripts to enumerate and attack Jenkins servers☆12Feb 1, 2024Updated 2 years ago
- all round pentest skill☆460Sep 16, 2026Updated last month
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆491Oct 14, 2026Updated 3 weeks ago