# 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner
☆25Jul 13, 2025Updated last year
Alternatives and similar repositories for PathCatcher
Users that are interested in PathCatcher are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- WayAI — Wayback & Common Crawl Recon (CLI + Web GUI)☆13Dec 28, 2025Updated 10 months ago
- API Security Researcher☆17Updated this week
- ☆21Oct 21, 2026Updated last week
- **A powerful, offline, single-file HTML tool designed for developers and security researchers to inspect and analyze JavaScript Source Ma…☆103Oct 24, 2025Updated last year
- This python based tool can be used to discover API keys, access tokens, and other sensitive data in JavaScript files. It can scan JavaScr…☆16Oct 18, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]☆11Jul 14, 2023Updated 3 years ago
- A command-line utility for auditing DNS configuration using Zonemaster API☆33Aug 21, 2023Updated 3 years ago
- A small React + Vite + Tailwind tool to parse Next.js `_buildManifest.js` and list routes/files.☆13Aug 10, 2025Updated last year
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- High-performance JavaScript reconnaissance tool with Aho-Corasick pattern matching for bug bounty hunters and security researchers☆11Jan 24, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal☆18May 7, 2024Updated 2 years ago
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- Ollama AI Analyzer runs directly on your local computer, using Ollama's AI models to analyze your HTTP requests and responses. This means…☆33Mar 1, 2025Updated last year
- Local File Inclusion (LFI) scanner.☆12Aug 31, 2022Updated 4 years ago
- ☆27Jun 21, 2026Updated 4 months ago
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- A local-only GUI tool to analyze `.js.map` source map files.☆62Jul 12, 2025Updated last year
- Burp Extension for a passive scanning JS files for endpoint links.☆57Nov 20, 2024Updated last year
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆25Apr 26, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Useful "Match and Replace" & "TLS Pass Through" in Burpsuite Rules☆11Sep 26, 2025Updated last year
- ☆46Mar 5, 2025Updated last year
- Analyze Android native `.so` files☆129Jul 28, 2025Updated last year
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- This repository contains random Nuclei templates I've created. Most of them based on recent security issues and exploits.☆18May 21, 2024Updated 2 years ago
- ☆10Sep 19, 2021Updated 5 years ago
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.☆35Jul 4, 2024Updated 2 years ago
- Burpsuite Extension for Jsmon☆25Jul 1, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆35Feb 5, 2026Updated 8 months ago
- A highly efficient and powerful Go script designed to detect sensitive data leaks in JavaScript files.☆22Dec 9, 2025Updated 10 months ago
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets☆147Jan 21, 2025Updated last year