urlhunter
interactsh
urlhunter | interactsh | |
---|---|---|
2 | 9 | |
1,463 | 3,106 | |
- | 2.5% | |
2.7 | 9.2 | |
6 months ago | about 7 hours ago | |
Go | Go | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
urlhunter
interactsh
- Do you know any Tools that display DNS interactions with your custom URL like burpsuite collaborator but is free?
-
Free servers for locating blind web app vulnerabilities
Would need hosting but try https://github.com/projectdiscovery/interactsh
-
Burp Suite Professional (Paid/Crack/Community)
OWASP ZAP is awesome when you are starting out, and keeps you from getting lazy. Pair it with something like https://github.com/projectdiscovery/interactsh for Out Of Band interactions (which would be the alternative to Burp Collaborator) and it will be pretty complete.
-
Burp Suite Pro Alternatives
Setup yourself: https://github.com/projectdiscovery/interactsh https://github.com/redfast00/malidate https://github.com/ettic-team/dnsbin https://github.com/allyomalley/dnsobserver
- Create own Burp Collaborator?
-
LinkBait - The Privacy, Security, & OSINT Show – Episode 187
I haven't listened to the episode yet, but based on the description it sounds very similar to various projects like interactsh. You can play around with it for free on https://app.interactsh.com. Take a look, it might be enough for your needs.
-
Log4Shell Log4j vulnerability (CVE-2021-44228) – cheat-sheet reference guide
https://github.com/projectdiscovery/interactsh
They seem to exfiltrate data. If you see these files hosted in your projects, then you are probably part of it now.
- Burp Collaborator alternative
What are some alternatives?
ppmap - A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
go-dork - The fastest dork scanner written in Go.
WebHackersWeapons - ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
goo.gl_abuse
Apache Log4j 2 - Apache Log4j 2 is a versatile, feature-rich, efficient logging API and backend for Java.
osmedeus - A Workflow Engine for Offensive Security
log4shell - Operational information regarding the log4shell vulnerabilities in the Log4j logging library.
OTE-Templates - Community curated list of templates for the OSINT template engine.
dnsbin - The request.bin of DNS request
hetty - An HTTP toolkit for security research.