raverrr

plution. Prototype pollution scanner using headless chrome

posrare. "A tool for security researchers and bug bounty hunters, designed to find and prioritize URLs based on the uniqueness and entropy of words in a specified position in the URL path.

dantiburl. @tomnomnom's anti-burl with some added functionality

onpage. Takes URLs on stdin and a regex as an argument, returns URLs to pages where a match was found

JSvarXSSTester. A tool entirely written with ChatGPT that takes URLS on stdin, extracts javascript variable names from the webpages, then uses them as query parameters 5 at a time checking the response bodies for reflections.

Zap. Owasp Zap Scripts

mutiny. A tool for security research and bug bounty that uses a headless browser to wrap common functions and report on their usage.