BitBlinder
XSS detector
A tool to detect blind XSS vulnerabilities by injecting custom payloads into HTTP requests in Burp Suite
BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities
107 stars
5 watching
23 forks
Language: Python
last commit: over 1 year ago
Linked from 1 awesome list
burp-extensionsburp-pluginburpsuiteburpsuite-extenderjythonpython
Related projects:
Repository | Description | Stars |
---|---|---|
attackercan/burp-xss-sql-plugin | Automated tool for detecting cross-site scripting (XSS) and SQL injection vulnerabilities in web applications. | 44 |
bugbountyforum/xss-radar | A tool designed to detect and exploit reflected cross-site scripting (XSS) vulnerabilities in web applications. | 318 |
snoopysecurity/noopener-burp-extension | Detects target="_blank" values without "noopener" and "noreferrer" attributes to identify potential phishing vulnerabilities | 4 |
mandatoryprogrammer/xsshunter_client | An instrument used to hunt and identify cross-site scripting (XSS) vulnerabilities by tracking correlated requests and payloads. | 249 |
v8blink/chromium-based-xss-taint-tracking | An XSS detection tool for web browsers with taint-tracking capabilities | 113 |
bitthebyte/eagle | A tool for detecting vulnerabilities in web applications | 110 |
codingo/minesweeper | A plugin for Burpsuite to detect malicious cryptocurrency mining scripts in web pages | 197 |
mystech7/burp-hunter | A plugin for Burp Suite that helps with blind XSS testing by performing injection replacements and correlating requests with an XSS Hunter domain | 148 |
lewisardern/bxss | Utility to identify Blind Cross-Site Scripting vulnerabilities in web applications | 518 |
jiangsir404/xss-sql-fuzz | Automates fuzzing of XSS and SQL injection vulnerabilities in web applications using Burp Suite extensions. | 60 |
epsylon/xsser | Automated tool to detect and exploit Cross Site Scripting (XSS) vulnerabilities in web applications | 1,204 |
damian89/extended-xss-search | A tool for scanning and identifying cross-site scripting (XSS) vulnerabilities in web applications | 182 |
pathetiq/burpsmartbuster | A Burp Suite plugin that automatically adds smart discovery features to brute force attacks | 383 |
anof-cyber/pycript | A tool for bypassing client-side encryption in web applications during penetration testing and bug bounty activities | 186 |
augustd/burp-suite-software-version-checks | An extension for Burp Suite that detects software version numbers in error responses and server headers. | 30 |