☆48Sep 21, 2025Updated last year
Alternatives and similar repositories for Dom-Explorer
Users that are interested in Dom-Explorer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PP-finder Help you find gadget for prototype pollution exploitation☆210May 15, 2026Updated 5 months ago
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆116Jun 23, 2025Updated last year
- ☆51Aug 2, 2025Updated last year
- DOM Clobbering Wiki, Browser Testing, and Payload Generation☆61Dec 18, 2025Updated 10 months ago
- CRLF Detection based on @BlackFan 's work See link below☆17Mar 14, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CSTI-Alert is a Node.js-based scanner that helps identify potential CSTI vulnerabilities in web applications.☆14Jul 21, 2025Updated last year
- ☆12Feb 1, 2026Updated 8 months ago
- Fast exfiltration of text using only CSS and Ligatures☆109Mar 16, 2026Updated 7 months ago
- Client-side JS analyzer for discovering server HTTP endpoints☆14Mar 15, 2026Updated 7 months ago
- ☆35Jan 31, 2026Updated 8 months ago
- Cracking V8 Math.random() from arbitrary bit leaks☆35Mar 16, 2026Updated 7 months ago
- Daily-updated global directory of 9,800+ public DNS resolvers across 153 countries, with uptime, DNSSEC, and filtering metadata in TXT, J…☆21Updated this week
- Comprehensive subdomain enumeration tool - 16+ passive OSINT sources, DNS brute force, permutation scanning, recursive enumeration & HTTP…☆25Jul 10, 2026Updated 3 months ago
- A script to enumerate valid usernames based on the requests response times.☆24May 3, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2…☆70Sep 18, 2026Updated last month
- This lab is for **EDUCATIONAL PURPOSES ONLY**. Use it responsibly and only on systems you own or have explicit permission to test. Do not…☆24Feb 20, 2026Updated 8 months ago
- Exploit for CVE-2026-33725 - Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import☆25Apr 23, 2026Updated 6 months ago
- A tool to extract and dump files of mercurial SCM exposed on a web server.☆13Jan 31, 2025Updated last year
- CSS injection requires an attacker to load a standalone CSS file to leak HTML tag attributes.☆21Apr 19, 2024Updated 2 years ago
- static sites for blog.orange.tw☆22Updated this week
- A tool to test cross-device authentication protocol security☆28Feb 24, 2025Updated last year
- This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities …☆27Apr 30, 2025Updated last year
- ☆16Oct 16, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- 🛠️ Workflows created by the community☆95Oct 15, 2026Updated 2 weeks ago
- TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.☆93Oct 18, 2026Updated last week
- DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get …☆24Updated this week
- 🎉 CVE Monitor v1.0☆28Jun 30, 2025Updated last year
- A tool that recovers the public key used to sign JWT tokens☆138May 16, 2023Updated 3 years ago
- Easily gather all routes related to a NextJs application through parsing of _buildManifest.js☆67Dec 12, 2022Updated 3 years ago
- ☆93Mar 26, 2024Updated 2 years ago
- A python script to automatically add a KeyCredentialLink to newly created users, by quickly connecting to them with default credentials.☆27Mar 17, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- PWNable pyjail☆13Jan 13, 2025Updated last year
- A collection of Server-Side Prototype Pollution gadgets and exploits☆242Feb 6, 2025Updated last year
- OLD repo for my GitBook (CTF writeups / vuln research / bugbounty) - please check out cryptocat.me/blog for the updated content!☆18Dec 30, 2025Updated 10 months ago
- ☆11Jan 8, 2023Updated 3 years ago
- Demo of various ways to exploit post based reflected XSS☆18Jul 6, 2023Updated 3 years ago
- An AI CTF challenges to learn some of the risks that AI Chatbots pose☆76Sep 20, 2026Updated last month
- Local-first detection and temporal localization of reused footage in egocentric video.☆36Sep 14, 2026Updated last month