Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.
☆81Nov 5, 2026Updated this week
Alternatives and similar repositories for burp-sectivai
Users that are interested in burp-sectivai are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Every public Web3 audit finding as plain text: 180,907 findings, 13,979 reports, 65 firms. Linked hubs and a metadata graph for AI agents…☆29Oct 29, 2026Updated last week
- A local, safety-first pre-submission reviewer for bug bounty reports.☆44Oct 3, 2026Updated last month
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.☆150Oct 9, 2026Updated 3 weeks ago
- Google Gemini API key discovery and security scanning tool.☆43Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- autonomous red teaming platform; multi-agent offensive-security meta-harness☆29Jul 6, 2026Updated 4 months ago
- CORS Exploit POC for WordPress REST API☆11Oct 27, 2024Updated 2 years ago
- A raw dump of my Apple MacOS research. Some likely can be ported over to other Apple OSes. Alot of this should likely be patched, but I d…☆113Updated this week
- Collection of tools, scripts, one-liners, templates, dorks and more☆12Mar 21, 2026Updated 7 months ago
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆30Oct 23, 2025Updated last year
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆79Aug 28, 2026Updated 2 months ago
- Collection of documentation, tools, and tips related to vulnerability research.☆279Sep 24, 2026Updated last month
- Define your SDLC as a graph and run every change through it on Claude Code, Codex, and your own agents.☆18Updated this week
- Enhancing Handwritten Quranic Arabic Recognition through Deep Learning☆21Jan 23, 2026Updated 9 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 403 Access Bypass Tester☆126Oct 13, 2026Updated 3 weeks ago
- AI triage can cost a submission fee, only to reject reports that don’t follow platform guidelines. Free Triager helps validate your repor…☆18Sep 25, 2026Updated last month
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆63Jul 12, 2026Updated 3 months ago
- Zer0Day Lab Are SCAMMERS☆29May 4, 2022Updated 4 years ago
- Get-NetScalerTimeline - Automated File System Timeline Creation for NetScaler ADC/Gateway (DFIR)☆15Oct 4, 2026Updated last month
- ☆36Sep 22, 2026Updated last month
- Shannon's 5-phase pentest pipeline running natively in Claude Code — no Docker, no Temporal, just /pentest https://github.com/KeygraphHQ…☆18Sep 19, 2026Updated last month
- Next.js RCE☆52Sep 29, 2026Updated last month
- A list of AI security skills☆118Oct 29, 2026Updated last week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆915Oct 3, 2026Updated last month
- A command-line interface for Raindrop.io bookmark management.☆15Feb 17, 2026Updated 8 months ago
- Netflix front end clone desktop version usign html and css☆12Mar 11, 2023Updated 3 years ago
- ☆16Aug 11, 2026Updated 2 months ago
- Create named OpenCode v2 workspaces from pasted instructions or AGENTS.md. macOS and Windows launcher.☆34Oct 17, 2026Updated 2 weeks ago
- Website built using codeigniter framework with admin panel and search, currency conversion, add to cart functionalities with integration …☆10Apr 2, 2019Updated 7 years ago
- Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.☆553Oct 24, 2026Updated last week
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated 2 months ago
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆59Jul 24, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- A two-domain Active Directory lab - lab.local + corp.local, 5 machines, 3 flags. Runs on VirtualBox. Spin it up and see how far you get.☆33Jul 26, 2026Updated 3 months ago
- Agent Browser Bridge for Firefox.☆21Apr 29, 2026Updated 6 months ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- ☆15Aug 21, 2026Updated 2 months ago
- Bash scripts to automate the burpsuite's certificate configuration and proxying of an Android device for penetration test.☆22May 26, 2025Updated last year