How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
The main features of anof-cyber/paraforge are: Payload Generators and Fuzzers.
Projects with overlapping indexed features include: ultimatehackers/xsstrike — XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web… maurosoria/dirsearch — dirsearch is a command-line security tool and web path scanner used for discovering hidden directories and files on… coreyd97/stepper — A natural evolution of Burp Suite's Repeater tool. enablesecurity/burp-luhn-payload-processor — A plugin for Burp Suite Pro to work with attacker payloads and automatically generate check digits for credit card… geoffwalton/burp--adhoc-payload-processors — Generate payload processors on the fly - without having to create individual extensions. d3vilbug/hackbar — HackBar plugin for Burpsuite.
XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web response analysis. It functions as a web application fuzzer and vulnerability scanner that identifies injection points and security flaws. The project includes a specialized utility for detecting blind XSS, where payloads execute asynchronously or on separate pages. It also features a JavaScript library auditor to identify outdated libraries with known vulnerabilities and a dedicated tool for identifying and bypassing web application firewalls using various evasion techniques.
dirsearch is a command-line security tool and web path scanner used for discovering hidden directories and files on web servers. It functions as a recursive directory fuzzer and brute-force utility that identifies undocumented paths and sensitive files using wordlists and HTTP status codes. The tool distinguishes itself through template-driven path generation and an automated HTTP response filter that uses status codes, content length, and regex patterns to isolate valid targets. It supports recursive directory crawling to map complex web structures and provides state-persistence serializatio
