lorsrf
Web vulnerability scanner
A tool designed to identify parameters in web applications that can be exploited for SSRF or out-of-band resource load attacks.
Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load 
291 stars
4 watching
43 forks
Language: Rust
last commit: 5 months ago blindssrfbruteforcebugbountyfuzzinghackingpenetration-testingpentestingrustssrfwebsecurity
Related projects:
| Repository | Description | Stars |
|---|---|---|
 kathanp19/gaussrf | A tool for identifying potential vulnerabilities in websites by fetching known URLs and filtering out ones with open redirects or SSRF parameters. | 168 |
 spidermate/b-xssrf | A toolkit to detect and track vulnerabilities in web applications | 295 |
 ksharinarayanan/ssrfire | An automated tool to discover potential Server-Side Request Forgery (SSRF) vulnerabilities in web applications by scanning the domain for open redirects and testing for cross-site scripting (XSS) | 953 |
 r0075h3ll/oralyzer | A tool to identify vulnerabilities in web applications by probing for Open Redirections and other types of attacks. | 758 |
 damian89/extended-ssrf-search | An SSRF scanner written in Python to identify potential vulnerabilities by scanning predefined settings in URLs and request headers. | 276 |
 menkrep1337/xsscon | A tool designed to scan websites for Cross-Site Scripting (XSS) vulnerabilities | 214 |
 assetnote/surf | A tool that identifies and filters potential Server-Side Request Forgery (SSRF) vulnerabilities in cloud environments by probing external hosts. | 599 |
 0xinfection/xsrfprobe | A toolkit designed to test and exploit Cross-Site Request Forgery vulnerabilities in websites. | 1,116 |
 lirantal/is-website-vulnerable | A tool that scans websites for publicly known security vulnerabilities in their frontend JavaScript libraries. | 1,942 |
 1n3/blackwidow | A Python-based web application scanner that gathers OSINT and fuzz data to identify OWASP vulnerabilities on target websites. | 1,545 |
 m0nad/hellraiser | Scans networks to identify vulnerabilities by correlating CPEs with CVEs using an API | 562 |
 serain/mailspoof | A tool to analyze and report on SPF and DMARC record issues for potential email spoofing vulnerabilities. | 128 |
 danmcinerney/xsscrapy | An automated tool for detecting cross-site scripting and SQL injection vulnerabilities in web applications | 1,665 |
 xawdxawdx/sentryssrf | A tool to search for and exploit Sentry configuration vulnerabilities in web applications | 68 |
 whwlsfb/log4j2scan | A tool that scans websites for Log4j2 remote code execution vulnerabilities using multiple DNS log platforms and supports various scan types | 776 |