A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks
☆61Aug 30, 2019Updated 7 years ago
Alternatives and similar repositories for XSSwagger
Users that are interested in XSSwagger are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Following OWASP TOP 10 (the top ten most critical web application security risk) I decided to build an XSS Scanner.☆12Dec 12, 2022Updated 3 years ago
- Command line tool for testing CRLF injection on a list of domains.☆161Apr 14, 2024Updated 2 years ago
- Automated blind-xss search for Burp Suite☆282Oct 10, 2019Updated 7 years ago
- A simple python script which can check HTTP status of branch of URLs/Subdomains and grab URLs/Subdomain title☆12Oct 16, 2019Updated 7 years ago
- Let's check if your target is vulnerable for client side prototype pollution.☆64Jan 9, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆63Apr 17, 2020Updated 6 years ago
- Smart ssrf scanner using different methods like parameter brute forcing in post and get...☆274Feb 11, 2021Updated 5 years ago
- Collection of different exploitation scenarios of JWT.☆21Jul 23, 2021Updated 5 years ago
- uforall is a fast url crawler this tool crawl all URLs number of different sources, alienvault,WayBackMachine,urlscan,commoncrawl☆58Nov 3, 2025Updated 11 months ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆342Aug 23, 2019Updated 7 years ago
- ☆201Jun 6, 2019Updated 7 years ago
- A Tool to Extract Open Kibana Instances on Internet and Map them to their Corresponding Organizations for Bug Bounty.☆16Sep 7, 2019Updated 7 years ago
- A better version of my xssfinder tool - scans for different types of xss on a list of urls.☆188Aug 3, 2019Updated 7 years ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆122May 12, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Wordlist to get files/ folders listed by the app that may expose passwords, sensitive file or folders☆22Jul 10, 2020Updated 6 years ago
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- Simple tools to handle string and generate subdomain permutations☆15Jun 8, 2022Updated 4 years ago
- Service-Now Article Bruteforcer☆16Jun 5, 2020Updated 6 years ago
- Tool to searching sentry config on page or in javascript files and check blind SSRF☆72May 28, 2024Updated 2 years ago
- ☆17May 3, 2021Updated 5 years ago
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 7 years ago
- BountyDash is a tool to combine your rewards from all platforms, giving you insights about your progress and bug hunting patterns.☆164Apr 24, 2025Updated last year
- ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight☆219Apr 10, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- List HackerOne private program assets☆157Jun 24, 2021Updated 5 years ago
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Nov 10, 2025Updated 11 months ago
- Burp extension to generate multi-step CSRF POC.☆31Sep 23, 2019Updated 7 years ago
- Everything about xss protection technology☆15Oct 22, 2019Updated 7 years ago
- A Mozilla Firefox extension which allows quick access to your google-dorking result☆19Jun 18, 2020Updated 6 years ago
- Just lists of lists of lists !☆17Oct 13, 2025Updated last year
- This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.☆75Nov 5, 2020Updated 5 years ago
- ☆70Jan 19, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.☆135Sep 25, 2019Updated 7 years ago
- A fuzzer for detecting open redirect vulnerabilities☆805Jul 1, 2024Updated 2 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.☆32Sep 20, 2020Updated 6 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- Automatic tool for DNS rebinding-based SSRF attacks☆309Aug 21, 2020Updated 6 years ago
- Bug Bounty Tools☆34Jul 2, 2020Updated 6 years ago