Tools

cappricio-securities/crlfi

This is a tool used by several security researchers to find Carriage Return Line Feed Injection Bug

cappricio-securities/openredirect

This is a tool used by several security researchers to find Open Redirect Bug

cappricio-securities/phpinfo-files-leaks

This tool is used to find php info page

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

renwax23/xsstron

Electron JS Browser To Find XSS Vulnerabilities Automatically

ashangp923/cve-2023-3971

To find HTML injection and XSS

rajeshmajumdar/brutexss

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI.…

jehadalqurashi/blackdir-framework

Web Application Vulnerability Scanner

hernanrodriguez1/sqli_sleeps

Detects time-based SQL injection by sending crafted GET requests to multiple URLs and measuring delayed responses; includes cookie support for…

philesiv/xsleaker

Searcher for cross-site leaks (XS-Leaks)

0xans/cve-2024-24919

Scans web applications for CVE-2024-24919 vulnerabilities via CLI, supporting a single target or wordlist-based bulk URL scanning.

projectdiscovery/fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

wpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

s0md3v/xsstrike

Most advanced XSS scanner.

sullo/nikto

Nikto web server scanner

hahwul/dalfox

Fast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…

urbanadventurer/whatweb

Next generation web scanner

enablesecurity/wafw00f

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…