Automatic SSTI detection tool with interactive interface
☆1,723Aug 25, 2026Updated 2 months ago
Alternatives and similar repositories for SSTImap
Users that are interested in SSTImap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,215Apr 21, 2024Updated 2 years ago
- TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…☆428Apr 27, 2026Updated 6 months ago
- This tool generates gopher link for exploiting SSRF and gaining RCE in various servers☆3,432Apr 18, 2023Updated 3 years ago
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,087Oct 4, 2025Updated last year
- Automatic SSRF fuzzer and exploitation tool☆3,644Aug 10, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…☆912May 16, 2026Updated 5 months ago
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,355Updated this week
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,787Jun 11, 2026Updated 4 months ago
- Local file inclusion exploitation tool☆1,006May 19, 2026Updated 5 months ago
- The Network Execution Tool☆5,971Updated this week
- A toolkit for testing, tweaking and cracking JSON Web Tokens☆6,809May 1, 2025Updated last year
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,812Dec 1, 2024Updated last year
- An IIS short filename enumeration tool☆1,234Nov 25, 2024Updated last year
- HTTP parameter discovery suite.☆6,436Feb 20, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,599Mar 8, 2026Updated 7 months ago
- PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.☆3,913Sep 29, 2025Updated last year
- A tool to perform Kerberos pre-auth bruteforcing☆3,483Aug 20, 2024Updated 2 years ago
- 403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibrati…☆1,916Updated this week
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,327Updated this week
- PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)☆20,753Updated this week
- An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.☆5,156Sep 26, 2026Updated last month
- A fast, simple, recursive content discovery tool written in Rust.☆8,153Updated this week
- Fast web fuzzer written in Go☆16,980Sep 26, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆5,155Oct 12, 2026Updated 3 weeks ago
- Fetch all the URLs that the Wayback Machine knows about for a domain☆4,599May 1, 2024Updated 2 years ago
- Hidden parameters discovery suite☆2,097Sep 8, 2024Updated 2 years ago
- Most advanced XSS scanner.☆15,238Apr 26, 2025Updated last year
- An XSS exploitation command-line interface and payload generator.☆1,499Jan 19, 2025Updated last year
- Monitor linux processes without root permissions☆6,233Mar 1, 2026Updated 8 months ago
- BloodyAD is an Active Directory Privilege Escalation Framework☆2,339Oct 25, 2026Updated last week
- A fast WordPress plugin enumeration tool☆971Oct 26, 2026Updated last week
- Username tools for penetration testing☆1,498Sep 20, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Security Auditor Utility for GraphQL APIs☆697Nov 20, 2025Updated 11 months ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,864Apr 17, 2026Updated 6 months ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆9,096Dec 4, 2025Updated 11 months ago
- Tool for Active Directory Certificate Services enumeration and abuse☆3,713Jul 30, 2026Updated 3 months ago
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆676Aug 28, 2025Updated last year
- A tool to dump a git repository from a website☆2,702Sep 6, 2026Updated last month
- An OOB interaction gathering server and client library☆4,614Updated this week