mirror of
https://github.com/hahwul/WebHackersWeapons.git
synced 2024-06-26 06:22:27 +00:00
Deploy README.md and Categorize Docs
This commit is contained in:
WHW
parent
f55760f4f3
commit
3783a315ac
590
README.md
590
README.md
|
|
@ -28,303 +28,305 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
| | Attributes |
|
||||
|-------|---------------------------------------------------|
|
||||
| Types | `Army-Knife` `Proxy` `Recon` `Fuzzer` `Scanner` `Exploit` `Env` `Utils` `Etc`|
|
||||
| Tags | [`infra`](/categorize/tags/infra.md) [`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md) [`pentest`](/categorize/tags/pentest.md) [`dns`](/categorize/tags/dns.md) [`subdomains`](/categorize/tags/subdomains.md) [`graphql`](/categorize/tags/graphql.md) [`online`](/categorize/tags/online.md) [`url`](/categorize/tags/url.md) [`param`](/categorize/tags/param.md) [`osint`](/categorize/tags/osint.md) [`port`](/categorize/tags/port.md) [`portscan`](/categorize/tags/portscan.md) [`endpoint`](/categorize/tags/endpoint.md) [`takeover`](/categorize/tags/takeover.md) [`domain`](/categorize/tags/domain.md) [`apk`](/categorize/tags/apk.md) [`ssrf`](/categorize/tags/ssrf.md) [`jwt`](/categorize/tags/jwt.md) [`cache-vuln`](/categorize/tags/cache-vuln.md) [`crlf`](/categorize/tags/crlf.md) [`path-traversal`](/categorize/tags/path-traversal.md) [`xss`](/categorize/tags/xss.md) [`oast`](/categorize/tags/oast.md) [`csp`](/categorize/tags/csp.md) [`exploit`](/categorize/tags/exploit.md) [`sqli`](/categorize/tags/sqli.md) [`s3`](/categorize/tags/s3.md) [`smuggle`](/categorize/tags/smuggle.md) [`cors`](/categorize/tags/cors.md) [`403`](/categorize/tags/403.md) [`aaa`](/categorize/tags/aaa.md) [`ssl`](/categorize/tags/ssl.md) [`broken-link`](/categorize/tags/broken-link.md) [`dependency-confusion`](/categorize/tags/dependency-confusion.md) [`rop`](/categorize/tags/rop.md) [`RMI`](/categorize/tags/RMI.md) [`xxe`](/categorize/tags/xxe.md) [`lfi`](/categorize/tags/lfi.md) [`blind-xss`](/categorize/tags/blind-xss.md) [`notify`](/categorize/tags/notify.md) [`cookie`](/categorize/tags/cookie.md) [`diff`](/categorize/tags/diff.md) [`http`](/categorize/tags/http.md) [`darkmode`](/categorize/tags/darkmode.md) [`payload`](/categorize/tags/payload.md) [`deserialize`](/categorize/tags/deserialize.md) [`web3`](/categorize/tags/web3.md) [`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md) [`report`](/categorize/tags/report.md) |
|
||||
| Langs | [`Shell`](/categorize/langs/Shell.md) [`Java`](/categorize/langs/Java.md) [`Go`](/categorize/langs/Go.md) [`Ruby`](/categorize/langs/Ruby.md) [`Python`](/categorize/langs/Python.md) [`Rust`](/categorize/langs/Rust.md) [`JavaScript`](/categorize/langs/JavaScript.md) [`Kotlin`](/categorize/langs/Kotlin.md) [`C`](/categorize/langs/C.md) [`Perl`](/categorize/langs/Perl.md) [`TypeScript`](/categorize/langs/TypeScript.md) [`BlitzBasic`](/categorize/langs/BlitzBasic.md) [`C++`](/categorize/langs/C++.md) [`HTML`](/categorize/langs/HTML.md) [`PHP`](/categorize/langs/PHP.md) [`C#`](/categorize/langs/C%23.md) [`CSS`](/categorize/langs/CSS.md) |
|
||||
| Tags | [`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md) [`infra`](/categorize/tags/infra.md) [`pentest`](/categorize/tags/pentest.md) [`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md) [`online`](/categorize/tags/online.md) [`port`](/categorize/tags/port.md) [`portscan`](/categorize/tags/portscan.md) [`graphql`](/categorize/tags/graphql.md) [`osint`](/categorize/tags/osint.md) [`dns`](/categorize/tags/dns.md) [`param`](/categorize/tags/param.md) [`domain`](/categorize/tags/domain.md) [`endpoint`](/categorize/tags/endpoint.md) [`apk`](/categorize/tags/apk.md) [`crlf`](/categorize/tags/crlf.md) [`ssrf`](/categorize/tags/ssrf.md) [`cache-vuln`](/categorize/tags/cache-vuln.md) [`jwt`](/categorize/tags/jwt.md) [`path-traversal`](/categorize/tags/path-traversal.md) [`xss`](/categorize/tags/xss.md) [`broken-link`](/categorize/tags/broken-link.md) [`smuggle`](/categorize/tags/smuggle.md) [`csp`](/categorize/tags/csp.md) [`ssl`](/categorize/tags/ssl.md) [`oast`](/categorize/tags/oast.md) [`dependency-confusion`](/categorize/tags/dependency-confusion.md) [`403`](/categorize/tags/403.md) [`cors`](/categorize/tags/cors.md) [`aaa`](/categorize/tags/aaa.md) [`sqli`](/categorize/tags/sqli.md) [`s3`](/categorize/tags/s3.md) [`exploit`](/categorize/tags/exploit.md) [`xxe`](/categorize/tags/xxe.md) [`rop`](/categorize/tags/rop.md) [`lfi`](/categorize/tags/lfi.md) [`RMI`](/categorize/tags/RMI.md) [`diff`](/categorize/tags/diff.md) [`blind-xss`](/categorize/tags/blind-xss.md) [`cookie`](/categorize/tags/cookie.md) [`notify`](/categorize/tags/notify.md) [`documents`](/categorize/tags/documents.md) [`deserialize`](/categorize/tags/deserialize.md) [`payload`](/categorize/tags/payload.md) [`web3`](/categorize/tags/web3.md) [`report`](/categorize/tags/report.md) [`wordlist`](/categorize/tags/wordlist.md) [`zipbomb`](/categorize/tags/zipbomb.md) [`http`](/categorize/tags/http.md) [`darkmode`](/categorize/tags/darkmode.md) |
|
||||
| Langs | [`Java`](/categorize/langs/Java.md) [`Go`](/categorize/langs/Go.md) [`Shell`](/categorize/langs/Shell.md) [`Ruby`](/categorize/langs/Ruby.md) [`Rust`](/categorize/langs/Rust.md) [`Python`](/categorize/langs/Python.md) [`JavaScript`](/categorize/langs/JavaScript.md) [`Kotlin`](/categorize/langs/Kotlin.md) [`C`](/categorize/langs/C.md) [`Perl`](/categorize/langs/Perl.md) [`TypeScript`](/categorize/langs/TypeScript.md) [`HTML`](/categorize/langs/HTML.md) [`C++`](/categorize/langs/C++.md) [`BlitzBasic`](/categorize/langs/BlitzBasic.md) [`C#`](/categorize/langs/C%23.md) [`PHP`](/categorize/langs/PHP.md) [`CSS`](/categorize/langs/CSS.md) |
|
||||
|
||||
### Tools
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[axiom](https://github.com/pry0cc/axiom)|A dynamic infrastructure toolkit for red teamers and bug bounty hunters! ||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Shell.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[jaeles](https://github.com/jaeles-project/jaeles)|The Swiss Army knife for automated Web Application Testing ||[`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Go.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[axiom](https://github.com/pry0cc/axiom)|A dynamic infrastructure toolkit for red teamers and bug bounty hunters! ||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Shell.md)|
|
||||
|Army-Knife|[Metasploit](https://github.com/rapid7/metasploit-framework)|The world’s most used penetration testing framework||[`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Proxy|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[HydraRecon](https://github.com/aufzayed/HydraRecon)|All In One, Fast, Easy Recon Tool|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[rengine](https://github.com/yogeshojha/rengine)|reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[OneForAll](https://github.com/shmilylty/OneForAll)|OneForAll是一款功能强大的子域收集工具 |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|Recon|[haktrails](https://github.com/hakluke/haktrails)|Golang client for querying SecurityTrails API data|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[uncover](https://github.com/projectdiscovery/uncover)|Quickly discover exposed hosts on the internet using multiple search engine.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[intrigue-core](https://github.com/intrigueio/intrigue-core)|Discover Your Attack Surface |||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[CT_subdomains](https://github.com/internetwache/CT_subdomains)|An hourly updated list of subdomains gathered from certificate transparency logs ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Chaos Web](https://chaos.projectdiscovery.io)| actively scan and maintain internet-wide assets' data. enhance research and analyse changes around DNS for better insights.||||
|
||||
|Recon|[github-endpoints](https://github.com/gwen001/github-endpoints)|Find endpoints on GitHub.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[HydraRecon](https://github.com/aufzayed/HydraRecon)|All In One, Fast, Easy Recon Tool|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[go-dork](https://github.com/dwisiswant0/go-dork)|The fastest dork scanner written in Go. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrevdns](https://github.com/hakluke/hakrevdns)|Small, fast tool for performing reverse DNS lookups en masse. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Osmedeus](https://github.com/j3ssie/Osmedeus)|Fully automated offensive security framework for reconnaissance and vulnerability scanning |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[x8](https://github.com/Sh1Yo/x8)|Hidden parameters discovery suite|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Shodan](https://www.shodan.io/)| World's first search engine for Internet-connected devices||[`osint`](/categorize/tags/osint.md)||
|
||||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[aquatone](https://github.com/michenriksen/aquatone)|A Tool for Domain Flyovers ||[`domain`](/categorize/tags/domain.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Hunt3r](https://github.com/EasyRecon/Hunt3r)|Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework|||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[rengine](https://github.com/yogeshojha/rengine)|reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[x8](https://github.com/Sh1Yo/x8)|Hidden parameters discovery suite|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[Osmedeus](https://github.com/j3ssie/Osmedeus)|Fully automated offensive security framework for reconnaissance and vulnerability scanning |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Shodan](https://www.shodan.io/)| World's first search engine for Internet-connected devices||[`osint`](/categorize/tags/osint.md)||
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[intrigue-core](https://github.com/intrigueio/intrigue-core)|Discover Your Attack Surface |||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[sn0int](https://github.com/kpcyrd/sn0int)|Semi-automatic OSINT framework and package manager||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[go-dork](https://github.com/dwisiswant0/go-dork)|The fastest dork scanner written in Go. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Chaos Web](https://chaos.projectdiscovery.io)| actively scan and maintain internet-wide assets' data. enhance research and analyse changes around DNS for better insights.||||
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[aquatone](https://github.com/michenriksen/aquatone)|A Tool for Domain Flyovers ||[`domain`](/categorize/tags/domain.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrevdns](https://github.com/hakluke/hakrevdns)|Small, fast tool for performing reverse DNS lookups en masse. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Recon|[OneForAll](https://github.com/shmilylty/OneForAll)|OneForAll是一款功能强大的子域收集工具 |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[uncover](https://github.com/projectdiscovery/uncover)|Quickly discover exposed hosts on the internet using multiple search engine.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[CT_subdomains](https://github.com/internetwache/CT_subdomains)|An hourly updated list of subdomains gathered from certificate transparency logs ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-endpoints](https://github.com/gwen001/github-endpoints)|Find endpoints on GitHub.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[scilla](https://github.com/edoardottt/scilla)|🏴☠️ Information Gathering tool 🏴☠️ dns/subdomain/port enumeration|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[SSRFire](https://github.com/ksharinarayanan/SSRFire)|An automated SSRF finder. Just give the domain name and your server and chill||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[BruteX](https://github.com/1N3/BruteX)|Automatically brute force all services running on a target.|||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[ppfuzz](https://github.com/dwisiswant0/ppfuzz)|A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[kiterunner](https://github.com/assetnote/kiterunner)|Contextual Content Discovery Tool|||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Hunt3r](https://github.com/EasyRecon/Hunt3r)|Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework|||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[ffuf](https://github.com/ffuf/ffuf)|Fast web fuzzer written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[crlfuzz](https://github.com/dwisiswant0/crlfuzz)|A fast tool to scan CRLF vulnerability written in Go ||[`crlf`](/categorize/tags/crlf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[thc-hydra](https://github.com/vanhauser-thc/thc-hydra)|hydra |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[SSRFire](https://github.com/ksharinarayanan/SSRFire)|An automated SSRF finder. Just give the domain name and your server and chill||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[BruteX](https://github.com/1N3/BruteX)|Automatically brute force all services running on a target.|||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[kiterunner](https://github.com/assetnote/kiterunner)|Contextual Content Discovery Tool|||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[dotdotpwn](https://github.com/wireghoul/dotdotpwn)|DotDotPwn - The Directory Traversal Fuzzer ||[`path-traversal`](/categorize/tags/path-traversal.md)|[](/categorize/langs/Perl.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[ppfuzz](https://github.com/dwisiswant0/ppfuzz)|A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[hashcat](https://github.com/hashcat/hashcat/)|World's fastest and most advanced password recovery utility |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[feroxbuster](https://github.com/epi052/feroxbuster)|A fast, simple, recursive content discovery tool written in Rust.|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[jwt-hack](https://github.com/hahwul/jwt-hack)|🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[httprobe](https://github.com/tomnomnom/httprobe)|Take a list of domains and probe for working HTTP and HTTPS servers |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[arachni](https://github.com/Arachni/arachni)|Web Application Security Scanner Framework |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Taipan](https://github.com/enkomio/Taipan)|Web application vulnerability scanner||||
|
||||
|Scanner|[sqlmap](https://github.com/sqlmapproject/sqlmap)|Automatic SQL injection and database takeover tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[plution](https://github.com/raverrr/plution)|Prototype pollution scanner using headless chrome|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[fockcache](https://github.com/tismayil/fockcache)|FockCache - Minimalized Test Cache Poisoning|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nuclei](https://github.com/projectdiscovery/nuclei)|Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[dotdotpwn](https://github.com/wireghoul/dotdotpwn)|DotDotPwn - The Directory Traversal Fuzzer ||[`path-traversal`](/categorize/tags/path-traversal.md)|[](/categorize/langs/Perl.md)|
|
||||
|Fuzzer|[thc-hydra](https://github.com/vanhauser-thc/thc-hydra)|hydra |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[DeadFinder](https://github.com/hahwul/deadfinder)|Find dead-links (broken links)||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[HRS](https://github.com/SafeBreach-Labs/HRS)|HTTP Request Smuggling demonstration Perl script, for variants 1, 2 and 5 in my BlackHat US 2020 paper HTTP Request Smuggling in 2020.|||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[httprobe](https://github.com/tomnomnom/httprobe)|Take a list of domains and probe for working HTTP and HTTPS servers |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[plution](https://github.com/raverrr/plution)|Prototype pollution scanner using headless chrome|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitGraber](https://github.com/hisxo/gitGraber)|gitGraber |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Taipan](https://github.com/enkomio/Taipan)|Web application vulnerability scanner||||
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Striker](https://github.com/s0md3v/Striker)|Striker is an offensive information and vulnerability scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[HRS](https://github.com/SafeBreach-Labs/HRS)|HTTP Request Smuggling demonstration Perl script, for variants 1, 2 and 5 in my BlackHat US 2020 paper HTTP Request Smuggling in 2020.|||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[fockcache](https://github.com/tismayil/fockcache)|FockCache - Minimalized Test Cache Poisoning|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nuclei](https://github.com/projectdiscovery/nuclei)|Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nikto](https://github.com/sullo/nikto)|Nikto web server scanner |||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[confused](https://github.com/visma-prodsec/confused)|Tool to check for dependency confusion vulnerabilities in multiple package management systems||[`dependency-confusion`](/categorize/tags/dependency-confusion.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[Oralyzer](https://github.com/r0075h3ll/Oralyzer)|Open Redirection Analyzer|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3cret Scanner](https://github.com/Eilonh/s3crets_scanner)|Hunting For Secrets Uploaded To Public S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[gitGraber](https://github.com/hisxo/gitGraber)|gitGraber |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Striker](https://github.com/s0md3v/Striker)|Striker is an offensive information and vulnerability scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[confused](https://github.com/visma-prodsec/confused)|Tool to check for dependency confusion vulnerabilities in multiple package management systems||[`dependency-confusion`](/categorize/tags/dependency-confusion.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[deadlinks](https://github.com/butuzov/deadlinks)|Health checks for your documentation links.||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[sqlmap](https://github.com/sqlmapproject/sqlmap)|Automatic SQL injection and database takeover tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[S3cret Scanner](https://github.com/Eilonh/s3crets_scanner)|Hunting For Secrets Uploaded To Public S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[arachni](https://github.com/Arachni/arachni)|Web Application Security Scanner Framework |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[Sn1per](https://github.com/1N3/Sn1per)|Automated pentest framework for offensive security experts |||[](/categorize/langs/Shell.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[of-CORS](https://github.com/trufflesecurity/of-CORS)|Identifying and exploiting CORS misconfigurations on the internal networks||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[ropr](https://github.com/Ben-Lichtman/ropr)|A blazing fast™ multithreaded ROP Gadget finder. ropper||[`rop`](/categorize/tags/rop.md)|[](/categorize/langs/Rust.md)|
|
||||
|Exploit|[XSRFProbe](https://github.com/0xInfection/XSRFProbe)|The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.|||[](/categorize/langs/Python.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja)|Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities.||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Perl.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[BaRMIe](https://github.com/NickstaDB/BaRMIe)|Java RMI enumeration and attack tool.||[`RMI`](/categorize/tags/RMI.md)|[](/categorize/langs/Java.md)|
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Exploit|[Sn1per](https://github.com/1N3/Sn1per)|Automated pentest framework for offensive security experts |||[](/categorize/langs/Shell.md)|
|
||||
|Exploit|[xxeserv](https://github.com/staaldraad/xxeserv)|A mini webserver with FTP support for XXE payloads|||[](/categorize/langs/Go.md)|
|
||||
|Exploit|[of-CORS](https://github.com/trufflesecurity/of-CORS)|Identifying and exploiting CORS misconfigurations on the internal networks||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Gopherus](https://github.com/tarunkant/Gopherus)|This tool generates gopher link for exploiting SSRF and gaining RCE in various servers ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[singularity](https://github.com/nccgroup/singularity)|A DNS rebinding attack framework.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Exploit|[SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja)|Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities.||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Perl.md)|
|
||||
|Exploit|[xxeserv](https://github.com/staaldraad/xxeserv)|A mini webserver with FTP support for XXE payloads|||[](/categorize/langs/Go.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Liffy](https://github.com/mzfr/liffy)|Local file inclusion exploitation tool||[`lfi`](/categorize/tags/lfi.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[cf-check](https://github.com/dwisiswant0/cf-check)|Cloudflare Checker written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[wssip](https://github.com/nccgroup/wssip)|Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Exploit|[BaRMIe](https://github.com/NickstaDB/BaRMIe)|Java RMI enumeration and attack tool.||[`RMI`](/categorize/tags/RMI.md)|[](/categorize/langs/Java.md)|
|
||||
|Exploit|[singularity](https://github.com/nccgroup/singularity)|A DNS rebinding attack framework.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[difftastic](https://github.com/Wilfred/difftastic)|a structural diff that understands syntax||[`diff`](/categorize/tags/diff.md)|[](/categorize/langs/Rust.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xss-cheatsheet-data](https://github.com/PortSwigger/xss-cheatsheet-data)|This repository contains all the XSS cheatsheet data to allow contributions from the community. ||[`xss`](/categorize/tags/xss.md)||
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[grc](https://github.com/garabik/grc)|generic colouriser|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[CSP Evaluator](https://csp-evaluator.withgoogle.com)|Online CSP Evaluator from google||[`csp`](/categorize/tags/csp.md)||
|
||||
|Utils|[SequenceDiagram](https://sequencediagram.org)|Online tool for creating UML sequence diagrams||[`online`](/categorize/tags/online.md)||
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)|A list of useful payloads and bypass for Web Application Security and Pentest/CTF |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[security-crawl-maze](https://github.com/google/security-crawl-maze)|Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/HTML.md)|
|
||||
|Utils|[security-research-pocs](https://github.com/google/security-research-pocs)|Proof-of-concept codes created as part of security research done by Google Security Team.|||[](/categorize/langs/C++.md)|
|
||||
|Utils|[PoC-in-GitHub](https://github.com/nomi-sec/PoC-in-GitHub)|📡 PoC auto collect from GitHub. Be careful malware.||||
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[can-i-take-over-xyz](https://github.com/EdOverflow/can-i-take-over-xyz)|"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.||||
|
||||
|Utils|[urlgrab](https://github.com/IAmStoxe/urlgrab)|A golang utility to spider through a website searching for additional links. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[hacks](https://github.com/tomnomnom/hacks)|A collection of hacks and one-off scripts |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[mubeng](https://github.com/kitabisa/mubeng)|An incredibly fast proxy checker & IP rotator with ease.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[SerializationDumper](https://github.com/NickstaDB/SerializationDumper)|A tool to dump Java serialization streams in a more human readable form.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[wssip](https://github.com/nccgroup/wssip)|Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[hakcheckurl](https://github.com/hakluke/hakcheckurl)|Takes a list of URLs and returns their HTTP response codes|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[CyberChef](https://github.com/gchq/CyberChef)|The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[gee](https://github.com/hahwul/gee)|🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gitls](https://github.com/hahwul/gitls)|Listing git repository from URL/User/Org|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[bountyplz](https://github.com/fransr/bountyplz)|Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) ||[`report`](/categorize/tags/report.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[Blacklist3r](https://github.com/NotSoSecure/Blacklist3r)|project-blacklist3r |||[](/categorize/langs/C%23.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable! |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. ||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[zip-bomb](https://github.com/damianrusinek/zip-bomb)|Create a ZIPBomb for a given uncompressed size (flat and nested modes).||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[oxml_xxe](https://github.com/BuffaloWill/oxml_xxe)|A tool for embedding XXE/XML exploits into different filetypes |||[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[ZipBomb](https://github.com/abdulfatir/ZipBomb)|A simple implementation of ZipBomb in Python||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Gf-Patterns](https://github.com/1ndianl33t/Gf-Patterns)|GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic) parameters grep ||||
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Atlas](https://github.com/m4ll0k/Atlas)|Quick SQLMap Tamper Suggester |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[cf-check](https://github.com/dwisiswant0/cf-check)|Cloudflare Checker written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[pet](https://github.com/knqyf263/pet)|Simple command-line snippet manager, written in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[CSP Evaluator](https://csp-evaluator.withgoogle.com)|Online CSP Evaluator from google||[`csp`](/categorize/tags/csp.md)||
|
||||
|Utils|[autochrome](https://github.com/nccgroup/autochrome)|This tool downloads, installs, and configures a shiny new copy of Chromium.|||[](/categorize/langs/HTML.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[github-regexp](https://github.com/gwen001/github-regexp)|Basically a regexp over a GitHub search.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dsieve](https://github.com/trickest/dsieve)|Filter and enrich a list of subdomains by level||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[SequenceDiagram](https://sequencediagram.org)|Online tool for creating UML sequence diagrams||[`online`](/categorize/tags/online.md)||
|
||||
|Utils|[xss-cheatsheet-data](https://github.com/PortSwigger/xss-cheatsheet-data)|This repository contains all the XSS cheatsheet data to allow contributions from the community. ||[`xss`](/categorize/tags/xss.md)||
|
||||
|Utils|[Findsploit](https://github.com/1N3/Findsploit)|Find exploits in local and online databases instantly||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[hurl](https://github.com/Orange-OpenSource/hurl)|Hurl, run and test HTTP requests.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[curl](https://github.com/curl/curl)|A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features|||[](/categorize/langs/C.md)|
|
||||
|Utils|[httptoolkit](https://github.com/httptoolkit/httptoolkit)|HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac||||
|
||||
|Utils|[IntruderPayloads](https://github.com/1N3/IntruderPayloads)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[grex](https://github.com/pemistahl/grex)|A command-line tool and library for generating regular expressions from user-provided test cases|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[curl](https://github.com/curl/curl)|A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features|||[](/categorize/langs/C.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable! |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[CyberChef](https://github.com/gchq/CyberChef)|The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[can-i-take-over-xyz](https://github.com/EdOverflow/can-i-take-over-xyz)|"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.||||
|
||||
|Utils|[Findsploit](https://github.com/1N3/Findsploit)|Find exploits in local and online databases instantly||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[security-crawl-maze](https://github.com/google/security-crawl-maze)|Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/HTML.md)|
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[pet](https://github.com/knqyf263/pet)|Simple command-line snippet manager, written in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[qsreplace](https://github.com/tomnomnom/qsreplace)|Accept URLs on stdin, replace all query string values with a user-supplied value |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[hurl](https://github.com/Orange-OpenSource/hurl)|Hurl, run and test HTTP requests.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[urlgrab](https://github.com/IAmStoxe/urlgrab)|A golang utility to spider through a website searching for additional links. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Blacklist3r](https://github.com/NotSoSecure/Blacklist3r)|project-blacklist3r |||[](/categorize/langs/C%23.md)|
|
||||
|Utils|[hakcheckurl](https://github.com/hakluke/hakcheckurl)|Takes a list of URLs and returns their HTTP response codes|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[Gf-Patterns](https://github.com/1ndianl33t/Gf-Patterns)|GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic) parameters grep ||||
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. ||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gee](https://github.com/hahwul/gee)|🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[oxml_xxe](https://github.com/BuffaloWill/oxml_xxe)|A tool for embedding XXE/XML exploits into different filetypes |||[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[hacks](https://github.com/tomnomnom/hacks)|A collection of hacks and one-off scripts |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[bountyplz](https://github.com/fransr/bountyplz)|Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) ||[`report`](/categorize/tags/report.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[PoC-in-GitHub](https://github.com/nomi-sec/PoC-in-GitHub)|📡 PoC auto collect from GitHub. Be careful malware.||||
|
||||
|Utils|[mubeng](https://github.com/kitabisa/mubeng)|An incredibly fast proxy checker & IP rotator with ease.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[anew](https://github.com/tomnomnom/anew)|A tool for adding new lines to files, skipping duplicates|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[Atlas](https://github.com/m4ll0k/Atlas)|Quick SQLMap Tamper Suggester |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[IntruderPayloads](https://github.com/1N3/IntruderPayloads)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/CSS.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[grc](https://github.com/garabik/grc)|generic colouriser|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[autochrome](https://github.com/nccgroup/autochrome)|This tool downloads, installs, and configures a shiny new copy of Chromium.|||[](/categorize/langs/HTML.md)|
|
||||
|Utils|[PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)|A list of useful payloads and bypass for Web Application Security and Pentest/CTF |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[gitls](https://github.com/hahwul/gitls)|Listing git repository from URL/User/Org|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[github-regexp](https://github.com/gwen001/github-regexp)|Basically a regexp over a GitHub search.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[SerializationDumper](https://github.com/NickstaDB/SerializationDumper)|A tool to dump Java serialization streams in a more human readable form.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[httptoolkit](https://github.com/httptoolkit/httptoolkit)|HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac||||
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|Env|[pentest-env](https://github.com/Sliim/pentest-env)|Pentest environment deployer (kali linux + targets) using vagrant and chef.||[`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Env|[Crimson](https://github.com/Karmaz95/crimson)|Web Application Security Testing automation.|||[](/categorize/langs/Python.md)|
|
||||
|Env|[Glue](https://github.com/OWASP/glue)|Application Security Automation|||[](/categorize/langs/Ruby.md)|
|
||||
|
|
@ -338,67 +340,67 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[DotGit](https://github.com/davtur19/DotGit)|An extension for checking if .git is exposed in visited websites|||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[Wayback Machine](https://apps.apple.com/us/app/wayback-machine/id1472432422)|History of website||||
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Hack-Tools](https://github.com/LasCC/Hack-Tools)|The all-in-one Red Team extension for Web Pentester 🛠|||[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[Dark Reader](https://github.com/darkreader/darkreader)|Dark mode to any site||[`darkmode`](/categorize/tags/darkmode.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[firefox-container-proxy](https://github.com/bekh6ex/firefox-container-proxy)|Assign a proxy to a Firefox container|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Dark Reader for Safari](https://apps.apple.com/us/app/dark-reader-for-safari/id1438243180)|Dark mode to any site||||
|
||||
|Utils|[clear-cache](https://github.com/TenSoja/clear-cache)|Add-on to clear browser cache with a single click or via the F9 key.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Edit-This-Cookie](https://github.com/ETCExtensions/Edit-This-Cookie)|EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Hack-Tools](https://github.com/LasCC/Hack-Tools)|The all-in-one Red Team extension for Web Pentester 🛠|||[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[clear-cache](https://github.com/TenSoja/clear-cache)|Add-on to clear browser cache with a single click or via the F9 key.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Dark Reader for Safari](https://apps.apple.com/us/app/dark-reader-for-safari/id1438243180)|Dark mode to any site||||
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[User-Agent Switcher](https://addons.mozilla.org/ko/firefox/addon/user-agent-switcher-revived/)|quick and easy way to switch between user-agents.||||
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[PwnFox](https://github.com/yeswehack/PwnFox)|Firefox/Burp extension that provide usefull tools for your security audit.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Firefox Multi-Account Containers](https://github.com/mozilla/multi-account-containers)|Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[PwnFox](https://github.com/yeswehack/PwnFox)|Firefox/Burp extension that provide usefull tools for your security audit.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Dark Reader](https://github.com/darkreader/darkreader)|Dark mode to any site||[`darkmode`](/categorize/tags/darkmode.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
### Burpsuite and ZAP Addons
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)||||[](/categorize/langs/Python.md)|
|
||||
|Recon|[HUNT](https://github.com/bugcrowd/HUNT)|Identifies common parameters vulnerable to certain vulnerability classes||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Kotlin.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[reflected-parameters](https://github.com/PortSwigger/reflected-parameters)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[HUNT](https://github.com/bugcrowd/HUNT)|Identifies common parameters vulnerable to certain vulnerability classes||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Kotlin.md)|
|
||||
|Recon|[BurpSuite-Secret_Finder](https://github.com/m4ll0k/BurpSuite-Secret_Finder)|||||
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[csp-auditor](https://github.com/GoSecure/csp-auditor)|||[`csp`](/categorize/tags/csp.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-exporter](https://github.com/artssec/burp-exporter)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer)|A Burp Extension designed to identify argument injection vulnerabilities.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Stepper](https://github.com/CoreyD97/Stepper)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpBounty](https://github.com/wagiro/BurpBounty)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[burp-piper](https://github.com/silentsignal/burp-piper)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|utils|[Neonmarker](https://github.com/kingthorin/neonmarker)||||[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[csp-auditor](https://github.com/GoSecure/csp-auditor)|||[`csp`](/categorize/tags/csp.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Berserko](https://github.com/nccgroup/Berserko)|Burp Suite extension to perform Kerberos authentication|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[pcap-burp](https://github.com/nccgroup/pcap-burp)|Pcap importer for Burp|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[safecopy](https://github.com/yashrs/safecopy)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Web3 Decoder](https://github.com/nccgroup/web3-decoder)|Burp Extension for Web3||[`web3`](/categorize/tags/web3.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer)|Because just a dark theme wasn't enough!|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[community-scripts](https://github.com/zaproxy/community-scripts)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[turbo-intruder](https://github.com/PortSwigger/turbo-intruder)||||[](/categorize/langs/Kotlin.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[safecopy](https://github.com/yashrs/safecopy)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer)|A Burp Extension designed to identify argument injection vulnerabilities.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[BurpBounty](https://github.com/wagiro/BurpBounty)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[HTTPSignatures](https://github.com/nccgroup/HTTPSignatures)|A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Decoder-Improved](https://github.com/nccgroup/Decoder-Improved)|Improved decoder for Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[knife](https://github.com/bit4woo/knife)|A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer)|Because just a dark theme wasn't enough!|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[pcap-burp](https://github.com/nccgroup/pcap-burp)|Pcap importer for Burp|||[](/categorize/langs/Java.md)|
|
||||
|utils|[Neonmarker](https://github.com/kingthorin/neonmarker)||||[](/categorize/langs/Java.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[Stepper](https://github.com/CoreyD97/Stepper)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Web3 Decoder](https://github.com/nccgroup/web3-decoder)|Burp Extension for Web3||[`web3`](/categorize/tags/web3.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-send-to](https://github.com/bytebutcher/burp-send-to)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-exporter](https://github.com/artssec/burp-exporter)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Decoder-Improved](https://github.com/nccgroup/Decoder-Improved)|Improved decoder for Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-piper](https://github.com/silentsignal/burp-piper)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[turbo-intruder](https://github.com/PortSwigger/turbo-intruder)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|
||||
## Thanks to (Contributor)
|
||||
WHW's open-source project and made it with ❤️ if you want contribute this project, please see [CONTRIBUTING.md](https://github.com/hahwul/WebHackersWeapons/blob/main/CONTRIBUTING.md) and Pull-Request with cool your contents.
|
||||
|
|
|
|||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|Utils|[Blacklist3r](https://github.com/NotSoSecure/Blacklist3r)|project-blacklist3r |||[](/categorize/langs/C%23.md)|
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,9 +4,9 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[thc-hydra](https://github.com/vanhauser-thc/thc-hydra)|hydra |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[hashcat](https://github.com/hashcat/hashcat/)|World's fastest and most advanced password recovery utility |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[thc-hydra](https://github.com/vanhauser-thc/thc-hydra)|hydra |||[](/categorize/langs/C.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Utils|[curl](https://github.com/curl/curl)|A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features|||[](/categorize/langs/C.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -6,108 +6,108 @@
|
|||
|Army-Knife|[jaeles](https://github.com/jaeles-project/jaeles)|The Swiss Army knife for automated Web Application Testing ||[`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[haktrails](https://github.com/hakluke/haktrails)|Golang client for querying SecurityTrails API data|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[uncover](https://github.com/projectdiscovery/uncover)|Quickly discover exposed hosts on the internet using multiple search engine.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-endpoints](https://github.com/gwen001/github-endpoints)|Find endpoints on GitHub.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[go-dork](https://github.com/dwisiswant0/go-dork)|The fastest dork scanner written in Go. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrevdns](https://github.com/hakluke/hakrevdns)|Small, fast tool for performing reverse DNS lookups en masse. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Osmedeus](https://github.com/j3ssie/Osmedeus)|Fully automated offensive security framework for reconnaissance and vulnerability scanning |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[aquatone](https://github.com/michenriksen/aquatone)|A Tool for Domain Flyovers ||[`domain`](/categorize/tags/domain.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[scilla](https://github.com/edoardottt/scilla)|🏴☠️ Information Gathering tool 🏴☠️ dns/subdomain/port enumeration|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Osmedeus](https://github.com/j3ssie/Osmedeus)|Fully automated offensive security framework for reconnaissance and vulnerability scanning |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[kiterunner](https://github.com/assetnote/kiterunner)|Contextual Content Discovery Tool|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[go-dork](https://github.com/dwisiswant0/go-dork)|The fastest dork scanner written in Go. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[aquatone](https://github.com/michenriksen/aquatone)|A Tool for Domain Flyovers ||[`domain`](/categorize/tags/domain.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrevdns](https://github.com/hakluke/hakrevdns)|Small, fast tool for performing reverse DNS lookups en masse. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[uncover](https://github.com/projectdiscovery/uncover)|Quickly discover exposed hosts on the internet using multiple search engine.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-endpoints](https://github.com/gwen001/github-endpoints)|Find endpoints on GitHub.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[scilla](https://github.com/edoardottt/scilla)|🏴☠️ Information Gathering tool 🏴☠️ dns/subdomain/port enumeration|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[ffuf](https://github.com/ffuf/ffuf)|Fast web fuzzer written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[kiterunner](https://github.com/assetnote/kiterunner)|Contextual Content Discovery Tool|||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[jwt-hack](https://github.com/hahwul/jwt-hack)|🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[httprobe](https://github.com/tomnomnom/httprobe)|Take a list of domains and probe for working HTTP and HTTPS servers |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[plution](https://github.com/raverrr/plution)|Prototype pollution scanner using headless chrome|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[fockcache](https://github.com/tismayil/fockcache)|FockCache - Minimalized Test Cache Poisoning|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nuclei](https://github.com/projectdiscovery/nuclei)|Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[confused](https://github.com/visma-prodsec/confused)|Tool to check for dependency confusion vulnerabilities in multiple package management systems||[`dependency-confusion`](/categorize/tags/dependency-confusion.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Exploit|[xxeserv](https://github.com/staaldraad/xxeserv)|A mini webserver with FTP support for XXE payloads|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[cf-check](https://github.com/dwisiswant0/cf-check)|Cloudflare Checker written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[dsieve](https://github.com/trickest/dsieve)|Filter and enrich a list of subdomains by level||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable! |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[pet](https://github.com/knqyf263/pet)|Simple command-line snippet manager, written in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[qsreplace](https://github.com/tomnomnom/qsreplace)|Accept URLs on stdin, replace all query string values with a user-supplied value |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlgrab](https://github.com/IAmStoxe/urlgrab)|A golang utility to spider through a website searching for additional links. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hakcheckurl](https://github.com/hakluke/hakcheckurl)|Takes a list of URLs and returns their HTTP response codes|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gee](https://github.com/hahwul/gee)|🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[hacks](https://github.com/tomnomnom/hacks)|A collection of hacks and one-off scripts |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[mubeng](https://github.com/kitabisa/mubeng)|An incredibly fast proxy checker & IP rotator with ease.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[anew](https://github.com/tomnomnom/anew)|A tool for adding new lines to files, skipping duplicates|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hakcheckurl](https://github.com/hakluke/hakcheckurl)|Takes a list of URLs and returns their HTTP response codes|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gee](https://github.com/hahwul/gee)|🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gitls](https://github.com/hahwul/gitls)|Listing git repository from URL/User/Org|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable! |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[cf-check](https://github.com/dwisiswant0/cf-check)|Cloudflare Checker written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[pet](https://github.com/knqyf263/pet)|Simple command-line snippet manager, written in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[github-regexp](https://github.com/gwen001/github-regexp)|Basically a regexp over a GitHub search.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dsieve](https://github.com/trickest/dsieve)|Filter and enrich a list of subdomains by level||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[qsreplace](https://github.com/tomnomnom/qsreplace)|Accept URLs on stdin, replace all query string values with a user-supplied value |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[anew](https://github.com/tomnomnom/anew)|A tool for adding new lines to files, skipping duplicates|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -9,30 +9,30 @@
|
|||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[csp-auditor](https://github.com/GoSecure/csp-auditor)|||[`csp`](/categorize/tags/csp.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[csp-auditor](https://github.com/GoSecure/csp-auditor)|||[`csp`](/categorize/tags/csp.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Exploit|[BaRMIe](https://github.com/NickstaDB/BaRMIe)|Java RMI enumeration and attack tool.||[`RMI`](/categorize/tags/RMI.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[Stepper](https://github.com/CoreyD97/Stepper)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus)||||[](/categorize/langs/Java.md)|
|
||||
|utils|[Neonmarker](https://github.com/kingthorin/neonmarker)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Berserko](https://github.com/nccgroup/Berserko)|Burp Suite extension to perform Kerberos authentication|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[pcap-burp](https://github.com/nccgroup/pcap-burp)|Pcap importer for Burp|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[safecopy](https://github.com/yashrs/safecopy)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[Web3 Decoder](https://github.com/nccgroup/web3-decoder)|Burp Extension for Web3||[`web3`](/categorize/tags/web3.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer)|Because just a dark theme wasn't enough!|||[](/categorize/langs/Java.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[HTTPSignatures](https://github.com/nccgroup/HTTPSignatures)|A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Decoder-Improved](https://github.com/nccgroup/Decoder-Improved)|Improved decoder for Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[knife](https://github.com/bit4woo/knife)|A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer)|Because just a dark theme wasn't enough!|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[pcap-burp](https://github.com/nccgroup/pcap-burp)|Pcap importer for Burp|||[](/categorize/langs/Java.md)|
|
||||
|utils|[Neonmarker](https://github.com/kingthorin/neonmarker)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[SerializationDumper](https://github.com/NickstaDB/SerializationDumper)|A tool to dump Java serialization streams in a more human readable form.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[Stepper](https://github.com/CoreyD97/Stepper)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Web3 Decoder](https://github.com/nccgroup/web3-decoder)|Burp Extension for Web3||[`web3`](/categorize/tags/web3.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-send-to](https://github.com/bytebutcher/burp-send-to)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Decoder-Improved](https://github.com/nccgroup/Decoder-Improved)|Improved decoder for Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus)||||[](/categorize/langs/Java.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -7,32 +7,32 @@
|
|||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[DotGit](https://github.com/davtur19/DotGit)|An extension for checking if .git is exposed in visited websites|||[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[singularity](https://github.com/nccgroup/singularity)|A DNS rebinding attack framework.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[firefox-container-proxy](https://github.com/bekh6ex/firefox-container-proxy)|Assign a proxy to a Firefox container|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[community-scripts](https://github.com/zaproxy/community-scripts)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Edit-This-Cookie](https://github.com/ETCExtensions/Edit-This-Cookie)|EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[wssip](https://github.com/nccgroup/wssip)|Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[CyberChef](https://github.com/gchq/CyberChef)|The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[firefox-container-proxy](https://github.com/bekh6ex/firefox-container-proxy)|Assign a proxy to a Firefox container|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[community-scripts](https://github.com/zaproxy/community-scripts)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[clear-cache](https://github.com/TenSoja/clear-cache)|Add-on to clear browser cache with a single click or via the F9 key.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Edit-This-Cookie](https://github.com/ETCExtensions/Edit-This-Cookie)|EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[PwnFox](https://github.com/yeswehack/PwnFox)|Firefox/Burp extension that provide usefull tools for your security audit.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[CyberChef](https://github.com/gchq/CyberChef)|The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Firefox Multi-Account Containers](https://github.com/mozilla/multi-account-containers)|Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[PwnFox](https://github.com/yeswehack/PwnFox)|Firefox/Burp extension that provide usefull tools for your security audit.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[HUNT](https://github.com/bugcrowd/HUNT)|Identifies common parameters vulnerable to certain vulnerability classes||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[burp-piper](https://github.com/silentsignal/burp-piper)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[turbo-intruder](https://github.com/PortSwigger/turbo-intruder)||||[](/categorize/langs/Kotlin.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,92 +4,94 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[HydraRecon](https://github.com/aufzayed/HydraRecon)|All In One, Fast, Easy Recon Tool|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)||||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[OneForAll](https://github.com/shmilylty/OneForAll)|OneForAll是一款功能强大的子域收集工具 |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)||||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqlmap](https://github.com/sqlmapproject/sqlmap)|Automatic SQL injection and database takeover tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Oralyzer](https://github.com/r0075h3ll/Oralyzer)|Open Redirection Analyzer|||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3cret Scanner](https://github.com/Eilonh/s3crets_scanner)|Hunting For Secrets Uploaded To Public S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[gitGraber](https://github.com/hisxo/gitGraber)|gitGraber |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Striker](https://github.com/s0md3v/Striker)|Striker is an offensive information and vulnerability scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Oralyzer](https://github.com/r0075h3ll/Oralyzer)|Open Redirection Analyzer|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[deadlinks](https://github.com/butuzov/deadlinks)|Health checks for your documentation links.||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[XSRFProbe](https://github.com/0xInfection/XSRFProbe)|The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.|||[](/categorize/langs/Python.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqlmap](https://github.com/sqlmapproject/sqlmap)|Automatic SQL injection and database takeover tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3cret Scanner](https://github.com/Eilonh/s3crets_scanner)|Hunting For Secrets Uploaded To Public S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Exploit|[of-CORS](https://github.com/trufflesecurity/of-CORS)|Identifying and exploiting CORS misconfigurations on the internal networks||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[XSRFProbe](https://github.com/0xInfection/XSRFProbe)|The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.|||[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Gopherus](https://github.com/tarunkant/Gopherus)|This tool generates gopher link for exploiting SSRF and gaining RCE in various servers ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Liffy](https://github.com/mzfr/liffy)|Local file inclusion exploitation tool||[`lfi`](/categorize/tags/lfi.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[burp-exporter](https://github.com/artssec/burp-exporter)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer)|A Burp Extension designed to identify argument injection vulnerabilities.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[grc](https://github.com/garabik/grc)|generic colouriser|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Atlas](https://github.com/m4ll0k/Atlas)|Quick SQLMap Tamper Suggester |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)|A list of useful payloads and bypass for Web Application Security and Pentest/CTF |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer)|A Burp Extension designed to identify argument injection vulnerabilities.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[zip-bomb](https://github.com/damianrusinek/zip-bomb)|Create a ZIPBomb for a given uncompressed size (flat and nested modes).||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[ZipBomb](https://github.com/abdulfatir/ZipBomb)|A simple implementation of ZipBomb in Python||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[burp-exporter](https://github.com/artssec/burp-exporter)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Atlas](https://github.com/m4ll0k/Atlas)|Quick SQLMap Tamper Suggester |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[grc](https://github.com/garabik/grc)|generic colouriser|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Env|[Crimson](https://github.com/Karmaz95/crimson)|Web Application Security Testing automation.|||[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -7,10 +7,10 @@
|
|||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[intrigue-core](https://github.com/intrigueio/intrigue-core)|Discover Your Attack Surface |||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[Hunt3r](https://github.com/EasyRecon/Hunt3r)|Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework|||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[arachni](https://github.com/Arachni/arachni)|Web Application Security Scanner Framework |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[DeadFinder](https://github.com/hahwul/deadfinder)|Find dead-links (broken links)||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[arachni](https://github.com/Arachni/arachni)|Web Application Security Scanner Framework |||[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[oxml_xxe](https://github.com/BuffaloWill/oxml_xxe)|A tool for embedding XXE/XML exploits into different filetypes |||[](/categorize/langs/Ruby.md)|
|
||||
|
|
|
|||
|
|
@ -4,17 +4,17 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[x8](https://github.com/Sh1Yo/x8)|Hidden parameters discovery suite|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[sn0int](https://github.com/kpcyrd/sn0int)|Semi-automatic OSINT framework and package manager||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[ppfuzz](https://github.com/dwisiswant0/ppfuzz)|A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[feroxbuster](https://github.com/epi052/feroxbuster)|A fast, simple, recursive content discovery tool written in Rust.|||[](/categorize/langs/Rust.md)|
|
||||
|Exploit|[ropr](https://github.com/Ben-Lichtman/ropr)|A blazing fast™ multithreaded ROP Gadget finder. ropper||[`rop`](/categorize/tags/rop.md)|[](/categorize/langs/Rust.md)|
|
||||
|Utils|[difftastic](https://github.com/Wilfred/difftastic)|a structural diff that understands syntax||[`diff`](/categorize/tags/diff.md)|[](/categorize/langs/Rust.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[grex](https://github.com/pemistahl/grex)|A command-line tool and library for generating regular expressions from user-provided test cases|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[hurl](https://github.com/Orange-OpenSource/hurl)|Hurl, run and test HTTP requests.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[grex](https://github.com/pemistahl/grex)|A command-line tool and library for generating regular expressions from user-provided test cases|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,20 +4,20 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[axiom](https://github.com/pry0cc/axiom)|A dynamic infrastructure toolkit for red teamers and bug bounty hunters! ||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[crlfuzz](https://github.com/dwisiswant0/crlfuzz)|A fast tool to scan CRLF vulnerability written in Go ||[`crlf`](/categorize/tags/crlf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[SSRFire](https://github.com/ksharinarayanan/SSRFire)|An automated SSRF finder. Just give the domain name and your server and chill||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[BruteX](https://github.com/1N3/BruteX)|Automatically brute force all services running on a target.|||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[crlfuzz](https://github.com/dwisiswant0/crlfuzz)|A fast tool to scan CRLF vulnerability written in Go ||[`crlf`](/categorize/tags/crlf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Exploit|[Sn1per](https://github.com/1N3/Sn1per)|Automated pentest framework for offensive security experts |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[Findsploit](https://github.com/1N3/Findsploit)|Find exploits in local and online databases instantly||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[bountyplz](https://github.com/fransr/bountyplz)|Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) ||[`report`](/categorize/tags/report.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[Findsploit](https://github.com/1N3/Findsploit)|Find exploits in local and online databases instantly||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Shell.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -5,6 +5,6 @@
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[Hack-Tools](https://github.com/LasCC/Hack-Tools)|The all-in-one Red Team extension for Web Pentester 🛠|||[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[Dark Reader](https://github.com/darkreader/darkreader)|Dark mode to any site||[`darkmode`](/categorize/tags/darkmode.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[Dark Reader](https://github.com/darkreader/darkreader)|Dark mode to any site||[`darkmode`](/categorize/tags/darkmode.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,10 +3,10 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -5,6 +5,6 @@
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Edit-This-Cookie](https://github.com/ETCExtensions/Edit-This-Cookie)|EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,8 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[of-CORS](https://github.com/trufflesecurity/of-CORS)|Identifying and exploiting CORS misconfigurations on the internal networks||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -5,11 +5,11 @@
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[security-crawl-maze](https://github.com/google/security-crawl-maze)|Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/HTML.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[SerializationDumper](https://github.com/NickstaDB/SerializationDumper)|A tool to dump Java serialization streams in a more human readable form.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,14 +3,14 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. ||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. ||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/CSS.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,8 +4,8 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,9 +3,9 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[jwt-hack](https://github.com/hahwul/jwt-hack)|🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -5,10 +5,10 @@
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Proxy|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,8 +4,8 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|
|
|
|||
|
|
@ -3,8 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Utils|[SequenceDiagram](https://sequencediagram.org)|Online tool for creating UML sequence diagrams||[`online`](/categorize/tags/online.md)||
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -5,6 +5,6 @@
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Shodan](https://www.shodan.io/)| World's first search engine for Internet-connected devices||[`osint`](/categorize/tags/osint.md)||
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[sn0int](https://github.com/kpcyrd/sn0int)|Semi-automatic OSINT framework and package manager||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,12 +3,12 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[reflected-parameters](https://github.com/PortSwigger/reflected-parameters)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[HUNT](https://github.com/bugcrowd/HUNT)|Identifies common parameters vulnerable to certain vulnerability classes||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Kotlin.md)|
|
||||
|Recon|[reflected-parameters](https://github.com/PortSwigger/reflected-parameters)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,8 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,10 +3,10 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,25 +3,25 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[CT_subdomains](https://github.com/internetwache/CT_subdomains)|An hourly updated list of subdomains gathered from certificate transparency logs ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[dsieve](https://github.com/trickest/dsieve)|Filter and enrich a list of subdomains by level||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,8 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,19 +3,19 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlgrab](https://github.com/IAmStoxe/urlgrab)|A golang utility to spider through a website searching for additional links. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,27 +3,27 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xss-cheatsheet-data](https://github.com/PortSwigger/xss-cheatsheet-data)|This repository contains all the XSS cheatsheet data to allow contributions from the community. ||[`xss`](/categorize/tags/xss.md)||
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[xss-cheatsheet-data](https://github.com/PortSwigger/xss-cheatsheet-data)|This repository contains all the XSS cheatsheet data to allow contributions from the community. ||[`xss`](/categorize/tags/xss.md)||
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,8 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
8
categorize/tags/zipbomb.md
Normal file
8
categorize/tags/zipbomb.md
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
|
||||
## Tools for zipbomb
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[zip-bomb](https://github.com/damianrusinek/zip-bomb)|Create a ZIPBomb for a given uncompressed size (flat and nested modes).||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[ZipBomb](https://github.com/abdulfatir/ZipBomb)|A simple implementation of ZipBomb in Python||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
@ -1 +1 @@
|
|||
Wed Jan 4 14:33:14 UTC 2023
|
||||
Wed Jan 18 14:46:46 UTC 2023
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user