Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets
☆147Jan 21, 2025Updated last year
Alternatives and similar repositories for js-snitch
Users that are interested in js-snitch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆45Feb 24, 2025Updated last year
- Get list of subsidiaries for a selected company☆32Dec 21, 2024Updated last year
- AI-powered ffuf wrapper☆811Dec 4, 2025Updated 10 months ago
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆31Oct 23, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- burpsuite extension to analyze javascript files using semgrep☆13Feb 3, 2025Updated last year
- ai-based domain name generation☆147May 7, 2026Updated 5 months ago
- Command line interface for Jsmon Security Platform☆34Jul 31, 2026Updated 2 months ago
- Extracts URLs from OSINT Archives for Security Insights☆194Updated this week
- List of Directory Traversal/LFI Payloads Scraped from the Internet☆184Feb 10, 2025Updated last year
- NetScan CLI is a command-line tool for retrieving and analyzing IP address information. It provides detailed subnet and organization data…☆62Sep 4, 2024Updated 2 years ago
- Hand-made Improved Nuclei Templates!🪴☆13Jun 12, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- Gather results of dorks across a number of search engines☆368Apr 23, 2026Updated 5 months ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Apr 9, 2026Updated 6 months ago
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying se…☆541Sep 20, 2026Updated 3 weeks ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆24Jul 13, 2025Updated last year
- A CLI tool to extract, analyze, and filter JavaScript links from web pages or URLs, with regex matching and structured JSON output.☆19Jan 6, 2025Updated last year
- unleashed ffuf☆254Oct 29, 2025Updated 11 months ago
- A fast, minimalistic scanner for time-based SQL injection (SQLi) detection – built in Go.☆147May 7, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Finds graphql queries in javascript files☆69May 18, 2024Updated 2 years ago
- A fast WordPress plugin enumeration tool☆961Aug 25, 2026Updated last month
- A tool for monitoring bug bounty programs across multiple platforms to track scope changes.☆35Sep 24, 2026Updated 3 weeks ago
- A simple browser extension to quickly find interesting security-related information on a webpage.☆190Sep 25, 2026Updated 2 weeks ago
- A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidde…☆453Apr 24, 2026Updated 5 months ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆879Oct 2, 2026Updated last week
- Tool to parse subdomains from dmarc.live☆155Apr 19, 2024Updated 2 years ago
- Process URLs and remove duplicate query parameters.☆27Mar 19, 2024Updated 2 years ago
- My Priv8 Nuclei Templates☆346May 12, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A passive way to find backups/ sensitive information.☆96Jul 10, 2025Updated last year
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,895Jun 21, 2026Updated 3 months ago
- Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdoma…☆62Aug 30, 2026Updated last month
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆298Oct 5, 2024Updated 2 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- bring shodan facets into your terminal without API key.☆112Oct 21, 2025Updated 11 months ago
- ☆46Mar 5, 2025Updated last year