vavkamil / XSSwaggerLinks
A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks
☆60Updated 6 years ago
Alternatives and similar repositories for XSSwagger
Users that are interested in XSSwagger are comparing it to the libraries listed below
Sorting:
- Host Header Injection Checker☆83Updated 3 years ago
- All known and unknown public POC's for wordpress themes and plugins☆78Updated 4 years ago
- Script to test open Akamai ARL vulnerability.☆70Updated 4 years ago
- A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!☆87Updated 5 years ago
- Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …☆52Updated 4 years ago
- ☆60Updated last year
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆66Updated 5 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆93Updated 5 months ago
- ☆44Updated 4 years ago
- Get the scope of your bugcrowd programs☆67Updated 5 years ago
- Wraps projectdiscovery's cdncheck library to exclude CDN hosts from input passed over stdin☆45Updated 2 years ago
- 4xxbypass☆67Updated 4 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆63Updated 5 years ago
- Expand urls into one url for each path depth☆33Updated 5 years ago
- Horizontal Domain Discovery☆77Updated 2 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Updated 6 years ago
- Misc bounty and vulndisc things☆84Updated 4 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆60Updated 2 years ago
- Running nuclei Continuously☆57Updated 3 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆156Updated 2 years ago
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆96Updated 4 years ago
- ☆59Updated 4 years ago
- SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.☆38Updated 4 years ago
- My Tools For Bug Bounty☆68Updated last year
- ☆90Updated 4 years ago
- Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.☆111Updated 3 years ago
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Updated last month
- MNS is a security and reconnaissance tool for monitoring new subdomains☆71Updated last week
- Burp Bounty profiles☆81Updated 3 years ago
- It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.☆59Updated 3 years ago