Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover hidden resources, parameters, and vulnerabilities. It functions as a content discovery scanner, a brute-force tool for credential guessing, and a plugin-based vulnerability scanner, all within a single modular system. The tool distinguishes itself through its plugin-based extensibility, allowing custom Python modules to add new payload sources, output printers, or scanning logic without modifying core code. It supports concurrent request dispatch using thread-based parallelism
Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by querying search engines and public intelligence sources. It functions as a security tool for identifying the digital footprint of a target domain. The project provides both passive enumeration through multi-source API aggregation and active discovery via a DNS brute force tool. It includes a TCP port scanner to identify active services and open ports on discovered subdomains, facilitating attack surface mapping. The tool can be used as a standalone utility or as a Python security
Les fonctionnalités principales de ismailtasdelen/xss-payload-list sont : Application Security, Attack Payloads.
Les alternatives open-source à ismailtasdelen/xss-payload-list incluent : xmendez/wfuzz — Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover… aboul3la/sublist3r — Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by… acheron-vaf/acheron. ambionics/phpggc — phpggc is a security assessment utility and command-line tool designed for the automated generation, obfuscation, and… anchore/grype — Grype is a command-line security scanner designed to identify known vulnerabilities within container images,… 7iosecurity/xss-payloads — XSS Payloads.
