A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It supports dynamic payload generation, including BCheck syntax, and can automatically generate Bambdas scripts. Additionally, it offers "Copy as JavaScript" to convert HTTP requests for enhanced XSS testi…
☆412May 28, 2026Updated 4 months ago
Alternatives and similar repositories for agartha
Users that are interested in agartha are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Useful "Match and Replace" burpsuite rules☆374Sep 26, 2023Updated 3 years ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,539Jan 8, 2026Updated 9 months ago
- Nuclei plugin for BurpSuite☆1,357Sep 22, 2026Updated last month
- Hidden parameters discovery suite☆224Nov 14, 2022Updated 3 years ago
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆388May 19, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hidden parameters discovery suite☆2,097Sep 8, 2024Updated 2 years ago
- For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙☆1,849Jun 9, 2024Updated 2 years ago
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects☆966Dec 8, 2021Updated 4 years ago
- Astra is a tool to find URLs and secrets inside a webpage/files☆211Mar 14, 2023Updated 3 years ago
- Smart context-based SSRF vulnerability scanner.☆365May 5, 2022Updated 4 years ago
- Automated blind-xss search for Burp Suite☆23Mar 28, 2022Updated 4 years ago
- declutters url lists for crawling/pentesting☆1,600Feb 23, 2025Updated last year
- Never forget where you inject.☆306Aug 15, 2025Updated last year
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆377Jul 25, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆905May 3, 2023Updated 3 years ago
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆184Nov 22, 2021Updated 4 years ago
- An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…☆810May 11, 2026Updated 5 months ago
- bypass-url-parser☆1,138Updated this week
- A repository that includes all the important wordlists used while bug hunting.☆1,438Mar 11, 2023Updated 3 years ago
- Awesome list of step by step techniques to achieve Remote Code Execution on various apps!☆1,940Oct 7, 2023Updated 3 years ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,904Jun 21, 2026Updated 4 months ago
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆945Aug 24, 2023Updated 3 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,107Aug 5, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆108May 2, 2024Updated 2 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,051Jun 6, 2026Updated 4 months ago
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,080Oct 4, 2025Updated last year
- Jeeves SQLI Finder☆214May 13, 2022Updated 4 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,091Updated this week
- 1337 Wordlists for Bug Bounty Hunting☆990Updated this week
- De-clutter a list of URLs☆390Mar 8, 2026Updated 7 months ago
- Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests w…☆645Oct 4, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Gotator is a tool to generate DNS wordlists through permutations.☆537Jul 17, 2022Updated 4 years ago
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆3,257May 13, 2023Updated 3 years ago
- Nuclei Templates to reproduce Cracking the lens's Research☆132Jan 8, 2022Updated 4 years ago
- Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.☆1,908Updated this week
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…☆1,207Jan 21, 2026Updated 9 months ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,385Aug 7, 2025Updated last year
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆428Oct 14, 2026Updated last week