XSStrike

XSStrike Advanced XSS Detection Suite XSStrike Wiki • Usage • FAQ • For Developers • Compatibility • Gallery XSStrike is a Cross Site Scripting detection suite equipped with four hand written parsers, an intelligent payload generator, a powerful fuzzing engine and an incredibly fast crawler...

tracy

Tracy A pentesting tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner. tracy should be used during the mapping-the-application phase of the pentest to identify sources of input and their corresponding outputs. tracy can...

xsscrapy

xsscrapy Fast, thorough, XSS/SQLi spider. Give it a URL and it'll test every link it finds for cross-site scripting and some SQL injection vulnerabilities. See FAQ for more details about SQLi detection. From within the main folder run: root@kitploit: ./xsscrapy.py -u http://example.com If you wis...

r3con

R3CON Multifunctional Web Recon & Vulnerability Scanner Tool r3con is a Multifunctional Web Recon & Vulnerability Scanner Tool and incredibly fast crawler that can find multiple vulnerabilitys and gather information. Check for vulnerabilities Reflected XSS Multi-threaded crawling Open-redirection...

XSSTRON

XSSTRON, Electron JS Browser To Find XSS Vulnerabilities Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation root@kitploit: Install Node.js and npm https://www.npmjs.com/get-npm or...

detectXSSlib

detectXSSlib Project folders: detectxsslib - main library see ReadMe.txt for more information modules - server modules using detectxsslib test - sets of URLs used for verification of the library tools - command line tools using detectxsslib See license.txt for licensing details...

webcopilot

WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...

teler-waf

teler-waf teler-waf is a comprehensive security solution for Go-based web applications. It acts as an HTTP middleware, providing an easy-to-use interface for integrating IDS functionality with teler IDS into existing Go applications. By using teler-waf, you can help protect against a variety of...

Papers

This repository is intended to host my research papers. Put it on watch if you would like to read more from me. Bypassing XSS Detection Mechanisms Download PDF A Phonetic Approach to Calculate Linguistic Information in Text Download PDF...

SSRFire

SSRFIRE An automated SSRF finder. Just give the domain name and your server and chill! ; It also has options to find XSS and open redirects. Syntax ./ssrfire.sh -d domain.com -s yourserver.com -f customfile.txt -c cookies domain.com --- The domain for which you want to test yourserver.com ---...

apidetector

APIDetector — это мощный и эффективный инструмент, предназначенный для проверки открытых конечных точек Swagger в различных поддоменах с уникальными интеллектуальными возможностями для обнаружения ложных срабатываний. Он особенно полезен для специалистов по безопасности и разработчиков,...

extended-xss-search

Buscador y Finder de XSS Extendido Esta es la versión extendida basada en la idea inicial ya publicada como "xssfinder". Esta versión privada permite a un atacante realizar no solo solicitudes GET sino también POST. Además, es posible proxy cada solicitud a través de Burp u otro túnel. Primeros...

BurpSentinel

Burp Sentinel Eases discovery of common security holes in web applications. Intro / tutorial: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction Blog: http://dobin.github.io/ With BurpSentinel it is possible for the penetration tester to quickly and easily send a lot...

xssmap

2020.08.20 update There are still a lot of bugs, so I'll take the time to fix them soon, so please keep updating. XSSMAP Detect XSS vulnerability in Web Applications Usage mimics sqlmap, and if you know sqlmap, you can easily handle xssmap! 中文介绍 Screenshots...

EagleEye

EagleEye: With the addition of the -ss option in HTTPX by Project Discovery, it is now possible to create a list of potentially vulnerable URLs with gf xss and qsreplace with the XSS payload, such as alerthacked. HTTPX will then visit all the URLs and take screenshots of them, which are stored in...

lua-ffi-libinjection

Name lua-resty-libinjection - libinjection용 LuaJIT FFI 바인딩 Status 이 라이브러리는 활발히 개발 중이며 프로덕션 환경에서 사용할 준비가 되었습니다. Description 이 라이브러리는 SQL/SQLi 및 XSS 토크나이저이자 분석기인 libinjection을 위한 FFI 바인딩을 제공합니다. Installation 다른 OpenResty lua 모듈과 동일한 방식으로 이 라이브러리를 설치하십시오. libinjection 공유 오브젝트 파일은 luapackagecpath에 위치...

s3cXSSer

s3cXSSer Questa estensione ti aiuterà a rilevare facilmente vulnerabilità XSS basate su GET/POST in qualsiasi sito web, S3C - XSSER - Estensione per Chrome Come aggiungerla a Chrome o Brave 1- Vai su brave://extensions/ o chrome://extensions/ 2- attiva la Modalità sviluppatore e clicca su Load...

BurpSuite-For-Pentester

🕷️ BurpSuite per Pentester Una pratica guida e cheat sheet su Burp Suite, progettata per bug bounty hunter e penetration tester per scoprire in modo efficiente vulnerabilità nelle applicazioni web, dalla severità bassa P4 a quella critica P1, usando Burp Suite. Questo repository fornisce un...

aem-xss

Бейджи Лицензия MIT Установка 1. Установите Python3 и pip Инструкции здесь Если вы не можете в этом разобраться, вам, вероятно, не стоит этим пользоваться Установка через pip root@kitploit: pip install aem-xss Выполните команду ниже для проверки aem-xss -h Конфигурация 2. Мы интегрировались с...

findom-xss

FinDOM-XSS FinDOM-XSS è uno strumento che ti permette di trovare possibili e/o potenziali vulnerabilità DOM XSS in modo rapido. Installazione root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dipendenze: LinkFinder Utilizzo Per eseguire lo strumento su ...