Compare commits
136 Commits
2242917487
...
49087c87a1
| Author | SHA1 | Date |
|---|---|---|
HAHWUL
|
49087c87a1 | |
|
WHW
|
e93ed3af9a | |
|
hahwul
|
6175d6a3b9 | |
|
hahwul
|
4f026887d5 | |
|
WHW
|
e9c2efb74c | |
|
hahwul
|
bdd1b9a7bc | |
|
hahwul
|
b12e39a296 | |
|
WHW
|
5b861a0ef0 | |
|
hahwul
|
31a82dd6b8 | |
|
WHW
|
fdba6718cf | |
|
hahwul
|
2dfdff222c | |
|
hahwul
|
7a1d0cd8ab | |
|
WHW
|
bdaf049018 | |
|
hahwul
|
56fc7b07e9 | |
|
hahwul
|
6a21013117 | |
|
hahwul
|
5b31796ca4 | |
|
hahwul
|
46e35bc4af | |
|
hahwul
|
07eeffb554 | |
|
hahwul
|
0ae59c9617 | |
|
WHW
|
7d51b8e1bd | |
|
hahwul
|
b077ebc5be | |
|
hahwul
|
a7df9de0de | |
|
WHW
|
a27cb515a5 | |
|
hahwul
|
08ba5857da | |
|
WHW
|
65a2dbd711 | |
|
hahwul
|
94ea4d4514 | |
|
WHW
|
bf3360fbe3 | |
|
hahwul
|
9f944087ed | |
|
WHW
|
108eb0bfae | |
|
HAHWUL
|
6516bcd24d | |
|
WHW
|
80361d3fe5 | |
|
hahwul
|
37774d086b | |
|
hahwul
|
38ae8de7a6 | |
|
hahwul
|
8d24997732 | |
|
hahwul
|
b7c09c32b0 | |
|
WHW
|
711a32977a | |
|
hahwul
|
52a4fb8cb5 | |
|
hahwul
|
0ba7eb82d3 | |
|
WHW
|
441a7de23c | |
|
HAHWUL
|
efacdbf326 | |
|
WHW
|
247b7aa583 | |
|
hahwul
|
d9ae1fffaf | |
|
hahwul
|
5ede66d981 | |
|
WHW
|
34c5b2c52e | |
|
hahwul
|
4daa4be86e | |
github-actions[bot]
|
f27a472786 | |
|
WHW
|
498eb18c1f | |
|
HAHWUL
|
3955240abb | |
Jackson Huff
|
b166238dfc | |
|
Jackson Huff
|
4929d1318b | |
|
WHW
|
668d0a3f25 | |
|
HAHWUL
|
e2591f25cd | |
|
WHW
|
caf295304f | |
|
HAHWUL
|
26ef2f1974 | |
|
WHW
|
264fd2fb8d | |
|
hahwul
|
52e41c322e | |
|
hahwul
|
41e59d0182 | |
|
hahwul
|
e05b9f0467 | |
|
hahwul
|
5994befbab | |
|
WHW
|
c4f34bd463 | |
|
HAHWUL
|
99f72c2f20 | |
|
WHW
|
b0a279e68b | |
|
github-actions[bot]
|
0e0c2456c6 | |
|
HAHWUL
|
c1206c48f1 | |
Apotheas
|
10dedaf066 | |
|
WHW
|
63a6765b49 | |
|
HAHWUL
|
4785763396 | |
|
WHW
|
bd06074d6c | |
|
hahwul
|
845a581adb | |
|
WHW
|
3783a315ac | |
|
hahwul
|
f55760f4f3 | |
|
WHW
|
39f47710b3 | |
|
hahwul
|
d009c14f73 | |
|
github-actions[bot]
|
47d79d8091 | |
|
WHW
|
a045c30e27 | |
|
hahwul
|
463b66a693 | |
|
WHW
|
2e1ef6ed6e | |
|
hahwul
|
5959dfcb2a | |
|
WHW
|
90a6ffb903 | |
|
hahwul
|
3a636d8b52 | |
|
hahwul
|
3f91dbf498 | |
|
WHW
|
ed0dcc0429 | |
|
hahwul
|
9328ebf48d | |
|
hahwul
|
e2e349dd89 | |
|
hahwul
|
14e928cc38 | |
|
WHW
|
0b6859e1d2 | |
|
hahwul
|
2c83069021 | |
|
hahwul
|
ad4756510b | |
|
hahwul
|
95c27d6515 | |
|
hahwul
|
f052c29bce | |
|
hahwul
|
5f7b65dfb4 | |
|
hahwul
|
8567bdd72e | |
|
WHW
|
d70579def5 | |
|
hahwul
|
973db35ef1 | |
|
WHW
|
d19a201a32 | |
|
hahwul
|
8b1069926f | |
|
hahwul
|
f2cf19ad49 | |
|
WHW
|
84681f53e7 | |
|
hahwul
|
af6fcc3f02 | |
|
WHW
|
5000a26de1 | |
|
hahwul
|
276a3c0633 | |
|
WHW
|
3a4fe14c4e | |
|
hahwul
|
557259b794 | |
|
WHW
|
f2a48fa89b | |
|
hahwul
|
9afec5a3cb | |
|
WHW
|
7dcd2264bb | |
|
hahwul
|
4979439785 | |
|
WHW
|
2e207ae36e | |
|
hahwul
|
f1394d039d | |
|
hahwul
|
c677747f90 | |
|
WHW
|
a272b9285a | |
|
hahwul
|
e6230667e9 | |
|
hahwul
|
ba5d7b7616 | |
|
hahwul
|
bd1c8ab69a | |
|
WHW
|
9818dec80e | |
|
hahwul
|
a199f07979 | |
|
hahwul
|
7bfeabcf95 | |
|
WHW
|
0a4e5b5155 | |
|
hahwul
|
139ccdbf3b | |
|
hahwul
|
afae03b8c7 | |
|
hahwul
|
afba785077 | |
|
WHW
|
c09724b80a | |
|
hahwul
|
d29dab3f0f | |
|
WHW
|
7c64c2f839 | |
|
hahwul
|
5fe3bcf7e5 | |
|
WHW
|
6c3a870f5c | |
|
hahwul
|
048f7aad0c | |
|
WHW
|
1a5281e471 | |
|
hahwul
|
515abd28e8 | |
|
hahwul
|
1ea62e7202 | |
|
WHW
|
54bcca09e6 | |
|
hahwul
|
5350838845 | |
|
WHW
|
a96423e0d6 | |
|
HAHWUL
|
72f367c342 | |
|
WHW
|
e8364123f0 | |
|
hahwul
|
fb79f46718 |
|
|
@ -0,0 +1 @@
|
|||
.DS_Store
|
||||
613
README.md
613
README.md
|
|
@ -28,287 +28,327 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
| | Attributes |
|
||||
|-------|---------------------------------------------------|
|
||||
| Types | `Army-Knife` `Proxy` `Recon` `Fuzzer` `Scanner` `Exploit` `Env` `Utils` `Etc`|
|
||||
| Tags | [`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`infra`](/categorize/tags/infra.md) [`pentest`](/categorize/tags/pentest.md) [`graphql`](/categorize/tags/graphql.md) [`dns`](/categorize/tags/dns.md) [`portscan`](/categorize/tags/portscan.md) [`subdomains`](/categorize/tags/subdomains.md) [`endpoint`](/categorize/tags/endpoint.md) [`takeover`](/categorize/tags/takeover.md) [`url`](/categorize/tags/url.md) [`osint`](/categorize/tags/osint.md) [`param`](/categorize/tags/param.md) [`crawl`](/categorize/tags/crawl.md) [`port`](/categorize/tags/port.md) [`apk`](/categorize/tags/apk.md) [`domain`](/categorize/tags/domain.md) [`jwt`](/categorize/tags/jwt.md) [`crlf`](/categorize/tags/crlf.md) [`ssrf`](/categorize/tags/ssrf.md) [`path-traversal`](/categorize/tags/path-traversal.md) [`xss`](/categorize/tags/xss.md) [`aaa`](/categorize/tags/aaa.md) [`cors`](/categorize/tags/cors.md) [`smuggle`](/categorize/tags/smuggle.md) [`ssl`](/categorize/tags/ssl.md) [`csp`](/categorize/tags/csp.md) [`403`](/categorize/tags/403.md) [`s3`](/categorize/tags/s3.md) [`broken-link`](/categorize/tags/broken-link.md) [`sqli`](/categorize/tags/sqli.md) [`exploit`](/categorize/tags/exploit.md) [`dependency-confusion`](/categorize/tags/dependency-confusion.md) [`oast`](/categorize/tags/oast.md) [`lfi`](/categorize/tags/lfi.md) [`xxe`](/categorize/tags/xxe.md) [`rop`](/categorize/tags/rop.md) [`cookie`](/categorize/tags/cookie.md) [`wordlist`](/categorize/tags/wordlist.md) [`report`](/categorize/tags/report.md) [`darkmode`](/categorize/tags/darkmode.md) [`notify`](/categorize/tags/notify.md) [`payload`](/categorize/tags/payload.md) [`http`](/categorize/tags/http.md) [`diff`](/categorize/tags/diff.md) |
|
||||
| Langs | [`Java`](/categorize/langs/Java.md) [`Go`](/categorize/langs/Go.md) [`Shell`](/categorize/langs/Shell.md) [`Ruby`](/categorize/langs/Ruby.md) [`Rust`](/categorize/langs/Rust.md) [`Python`](/categorize/langs/Python.md) [`JavaScript`](/categorize/langs/JavaScript.md) [`C`](/categorize/langs/C.md) [`Kotlin`](/categorize/langs/Kotlin.md) [`Perl`](/categorize/langs/Perl.md) [`CSS`](/categorize/langs/CSS.md) [`BlitzBasic`](/categorize/langs/BlitzBasic.md) [`HTML`](/categorize/langs/HTML.md) [`C#`](/categorize/langs/C#.md) [`C++`](/categorize/langs/C++.md) [`TypeScript`](/categorize/langs/TypeScript.md) [`PHP`](/categorize/langs/PHP.md) [`Kotiln`](/categorize/langs/Kotiln.md) |
|
||||
| Tags | [`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md) [`infra`](/categorize/tags/infra.md) [`pentest`](/categorize/tags/pentest.md) [`js-analysis`](/categorize/tags/js-analysis.md) [`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md) [`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md) [`takeover`](/categorize/tags/takeover.md) [`dns`](/categorize/tags/dns.md) [`osint`](/categorize/tags/osint.md) [`online`](/categorize/tags/online.md) [`domain`](/categorize/tags/domain.md) [`graphql`](/categorize/tags/graphql.md) [`portscan`](/categorize/tags/portscan.md) [`port`](/categorize/tags/port.md) [`apk`](/categorize/tags/apk.md) [`cache-vuln`](/categorize/tags/cache-vuln.md) [`ssti`](/categorize/tags/ssti.md) [`crlf`](/categorize/tags/crlf.md) [`jwt`](/categorize/tags/jwt.md) [`ssrf`](/categorize/tags/ssrf.md) [`path-traversal`](/categorize/tags/path-traversal.md) [`s3`](/categorize/tags/s3.md) [`sqli`](/categorize/tags/sqli.md) [`403`](/categorize/tags/403.md) [`xss`](/categorize/tags/xss.md) [`ssl`](/categorize/tags/ssl.md) [`cors`](/categorize/tags/cors.md) [`broken-link`](/categorize/tags/broken-link.md) [`csp`](/categorize/tags/csp.md) [`smuggle`](/categorize/tags/smuggle.md) [`oast`](/categorize/tags/oast.md) [`aaa`](/categorize/tags/aaa.md) [`dependency-confusion`](/categorize/tags/dependency-confusion.md) [`exploit`](/categorize/tags/exploit.md) [`xxe`](/categorize/tags/xxe.md) [`RMI`](/categorize/tags/RMI.md) [`lfi`](/categorize/tags/lfi.md) [`rop`](/categorize/tags/rop.md) [`cookie`](/categorize/tags/cookie.md) [`nuclei-templates`](/categorize/tags/nuclei-templates.md) [`blind-xss`](/categorize/tags/blind-xss.md) [`fuzz`](/categorize/tags/fuzz.md) [`http`](/categorize/tags/http.md) [`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md) [`deserialize`](/categorize/tags/deserialize.md) [`zipbomb`](/categorize/tags/zipbomb.md) [`darkmode`](/categorize/tags/darkmode.md) [`notify`](/categorize/tags/notify.md) [`json`](/categorize/tags/json.md) [`payload`](/categorize/tags/payload.md) [`diff`](/categorize/tags/diff.md) [`encode`](/categorize/tags/encode.md) [`web3`](/categorize/tags/web3.md) [`clipboard`](/categorize/tags/clipboard.md) [`report`](/categorize/tags/report.md) |
|
||||
| Langs | [`Java`](/categorize/langs/Java.md) [`Go`](/categorize/langs/Go.md) [`Shell`](/categorize/langs/Shell.md) [`Ruby`](/categorize/langs/Ruby.md) [`Python`](/categorize/langs/Python.md) [`Rust`](/categorize/langs/Rust.md) [`JavaScript`](/categorize/langs/JavaScript.md) [`Crystal`](/categorize/langs/Crystal.md) [`C`](/categorize/langs/C.md) [`Kotlin`](/categorize/langs/Kotlin.md) [`Perl`](/categorize/langs/Perl.md) [`TypeScript`](/categorize/langs/TypeScript.md) [`BlitzBasic`](/categorize/langs/BlitzBasic.md) [`Txt`](/categorize/langs/Txt.md) [`C#`](/categorize/langs/C%23.md) [`CSS`](/categorize/langs/CSS.md) [`PHP`](/categorize/langs/PHP.md) [`HTML`](/categorize/langs/HTML.md) [`C++`](/categorize/langs/C++.md) |
|
||||
|
||||
### Tools
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[jaeles](https://github.com/jaeles-project/jaeles)|The Swiss Army knife for automated Web Application Testing ||[`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Go.md)|
|
||||
|Army-Knife|[axiom](https://github.com/pry0cc/axiom)|A dynamic infrastructure toolkit for red teamers and bug bounty hunters! ||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Shell.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[Metasploit](https://github.com/rapid7/metasploit-framework)|The world’s most used penetration testing framework||[`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Proxy|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[haktrails](https://github.com/hakluke/haktrails)|Golang client for querying SecurityTrails API data|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[Shodan](https://www.shodan.io/)| World's first search engine for Internet-connected devices||[`osint`](/categorize/tags/osint.md)||
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[rengine](https://github.com/yogeshojha/rengine)|reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[sn0int](https://github.com/kpcyrd/sn0int)|Semi-automatic OSINT framework and package manager||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[Chaos Web](https://chaos.projectdiscovery.io)| actively scan and maintain internet-wide assets' data. enhance research and analyse changes around DNS for better insights.||||
|
||||
|Recon|[x8](https://github.com/Sh1Yo/x8)|Hidden parameters discovery suite|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[CT_subdomains](https://github.com/internetwache/CT_subdomains)|An hourly updated list of subdomains gathered from certificate transparency logs ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Hunt3r](https://github.com/EasyRecon/Hunt3r)|Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework|||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Proxy|[Glorp](https://github.com/denandz/glorp)|A CLI-based HTTP intercept and replay proxy||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[github-endpoints](https://github.com/gwen001/github-endpoints)|Find endpoints on GitHub.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[OneForAll](https://github.com/shmilylty/OneForAll)|OneForAll是一款功能强大的子域收集工具 |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[uncover](https://github.com/projectdiscovery/uncover)|Quickly discover exposed hosts on the internet using multiple search engine.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[HydraRecon](https://github.com/aufzayed/HydraRecon)|All In One, Fast, Easy Recon Tool|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md)||
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[hakrevdns](https://github.com/hakluke/hakrevdns)|Small, fast tool for performing reverse DNS lookups en masse. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Osmedeus](https://github.com/j3ssie/Osmedeus)|Fully automated offensive security framework for reconnaissance and vulnerability scanning |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[intrigue-core](https://github.com/intrigueio/intrigue-core)|Discover Your Attack Surface |||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[go-dork](https://github.com/dwisiswant0/go-dork)|The fastest dork scanner written in Go. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[noir](https://github.com/hahwul/noir)|♠️ Noir is an attack surface detector form source code.||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Crystal.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[rengine](https://github.com/yogeshojha/rengine)|reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[scilla](https://github.com/edoardottt/scilla)|🏴☠️ Information Gathering tool 🏴☠️ dns/subdomain/port enumeration|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Hunt3r](https://github.com/EasyRecon/Hunt3r)|Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework|||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Shodan](https://www.shodan.io/)| World's first search engine for Internet-connected devices||[`osint`](/categorize/tags/osint.md)||
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[uncover](https://github.com/projectdiscovery/uncover)|Quickly discover exposed hosts on the internet using multiple search engine.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[aquatone](https://github.com/michenriksen/aquatone)|A Tool for Domain Flyovers ||[`domain`](/categorize/tags/domain.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[hakrevdns](https://github.com/hakluke/hakrevdns)|Small, fast tool for performing reverse DNS lookups en masse. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Osmedeus](https://github.com/j3ssie/Osmedeus)|Fully automated offensive security framework for reconnaissance and vulnerability scanning |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[sn0int](https://github.com/kpcyrd/sn0int)|Semi-automatic OSINT framework and package manager||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[x8](https://github.com/Sh1Yo/x8)|Hidden parameters discovery suite|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[shosubgo](https://github.com/incogbyte/shosubgo)|Small tool to Grab subdomains using Shodan api.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[intrigue-core](https://github.com/intrigueio/intrigue-core)|Discover Your Attack Surface |||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[haktrails](https://github.com/hakluke/haktrails)|Golang client for querying SecurityTrails API data|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[CT_subdomains](https://github.com/internetwache/CT_subdomains)|An hourly updated list of subdomains gathered from certificate transparency logs ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[HydraRecon](https://github.com/aufzayed/HydraRecon)|All In One, Fast, Easy Recon Tool|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[jsluice](https://github.com/BishopFox/jsluice)|Extract URLs, paths, secrets, and other interesting bits from JavaScript||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Chaos Web](https://chaos.projectdiscovery.io)| actively scan and maintain internet-wide assets' data. enhance research and analyse changes around DNS for better insights.||||
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[scilla](https://github.com/edoardottt/scilla)|🏴☠️ Information Gathering tool 🏴☠️ dns/subdomain/port enumeration|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[HostHunter](https://github.com/SpiderLabs/HostHunter)|Recon tool for discovering hostnames using OSINT techniques.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[OneForAll](https://github.com/shmilylty/OneForAll)|OneForAll是一款功能强大的子域收集工具 |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md) [`url`](/categorize/tags/url.md) [`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[crlfuzz](https://github.com/dwisiswant0/crlfuzz)|A fast tool to scan CRLF vulnerability written in Go ||[`crlf`](/categorize/tags/crlf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[feroxbuster](https://github.com/epi052/feroxbuster)|A fast, simple, recursive content discovery tool written in Rust.|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[hashcat](https://github.com/hashcat/hashcat/)|World's fastest and most advanced password recovery utility |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[jwt-hack](https://github.com/hahwul/jwt-hack)|🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[BruteX](https://github.com/1N3/BruteX)|Automatically brute force all services running on a target.|||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[SSTImap](https://github.com/vladko312/SSTImap)|Automatic SSTI detection tool with interactive interface||[`ssti`](/categorize/tags/ssti.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[hashcat](https://github.com/hashcat/hashcat/)|World's fastest and most advanced password recovery utility |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[ParamPamPam](https://github.com/Bo0oM/ParamPamPam)|This tool for brute discover GET and POST parameters.||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[crlfuzz](https://github.com/dwisiswant0/crlfuzz)|A fast tool to scan CRLF vulnerability written in Go ||[`crlf`](/categorize/tags/crlf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[jwt-hack](https://github.com/hahwul/jwt-hack)|🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[ffuf](https://github.com/ffuf/ffuf)|Fast web fuzzer written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[thc-hydra](https://github.com/vanhauser-thc/thc-hydra)|hydra |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[feroxbuster](https://github.com/epi052/feroxbuster)|A fast, simple, recursive content discovery tool written in Rust.|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[ppfuzz](https://github.com/dwisiswant0/ppfuzz)|A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[SSRFire](https://github.com/ksharinarayanan/SSRFire)|An automated SSRF finder. Just give the domain name and your server and chill||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[kiterunner](https://github.com/assetnote/kiterunner)|Contextual Content Discovery Tool|||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[dotdotpwn](https://github.com/wireghoul/dotdotpwn)|DotDotPwn - The Directory Traversal Fuzzer ||[`path-traversal`](/categorize/tags/path-traversal.md)|[](/categorize/langs/Perl.md)|
|
||||
|Fuzzer|[ppfuzz](https://github.com/dwisiswant0/ppfuzz)|A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[thc-hydra](https://github.com/vanhauser-thc/thc-hydra)|hydra |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port |||[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[sqlmap](https://github.com/sqlmapproject/sqlmap)|Automatic SQL injection and database takeover tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[HRS](https://github.com/SafeBreach-Labs/HRS)|HTTP Request Smuggling demonstration Perl script, for variants 1, 2 and 5 in my BlackHat US 2020 paper HTTP Request Smuggling in 2020.|||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[arachni](https://github.com/Arachni/arachni)|Web Application Security Scanner Framework |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[httprobe](https://github.com/tomnomnom/httprobe)|Take a list of domains and probe for working HTTP and HTTPS servers |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DeadFinder](https://github.com/hahwul/deadfinder)|Find dead-links (broken links)||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[nikto](https://github.com/sullo/nikto)|Nikto web server scanner |||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[deadlinks](https://github.com/butuzov/deadlinks)|Health checks for your documentation links.||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019|||[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[fockcache](https://github.com/tismayil/fockcache)|FockCache - Minimalized Test Cache Poisoning|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Striker](https://github.com/s0md3v/Striker)|Striker is an offensive information and vulnerability scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nuclei](https://github.com/projectdiscovery/nuclei)|Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[plution](https://github.com/raverrr/plution)|Prototype pollution scanner using headless chrome|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Taipan](https://github.com/enkomio/Taipan)|Web application vulnerability scanner||||
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitGraber](https://github.com/hisxo/gitGraber)|gitGraber |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[confused](https://github.com/visma-prodsec/confused)|Tool to check for dependency confusion vulnerabilities in multiple package management systems||[`dependency-confusion`](/categorize/tags/dependency-confusion.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[httprobe](https://github.com/tomnomnom/httprobe)|Take a list of domains and probe for working HTTP and HTTPS servers |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[Striker](https://github.com/s0md3v/Striker)|Striker is an offensive information and vulnerability scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[arachni](https://github.com/Arachni/arachni)|Web Application Security Scanner Framework |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[deadlinks](https://github.com/butuzov/deadlinks)|Health checks for your documentation links.||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nuclei](https://github.com/projectdiscovery/nuclei)|Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DeadFinder](https://github.com/hahwul/deadfinder)|Find dead-links (broken links)||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[HRS](https://github.com/SafeBreach-Labs/HRS)|HTTP Request Smuggling demonstration Perl script, for variants 1, 2 and 5 in my BlackHat US 2020 paper HTTP Request Smuggling in 2020.|||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[SQL Ninja](https://gitlab.com/kalilinux/packages/sqlninja)|SQL Injection scanner||||
|
||||
|Exploit|[Liffy](https://github.com/mzfr/liffy)|Local file inclusion exploitation tool||[`lfi`](/categorize/tags/lfi.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[ropr](https://github.com/Ben-Lichtman/ropr)|A blazing fast™ multithreaded ROP Gadget finder. ropper||[`rop`](/categorize/tags/rop.md)|[](/categorize/langs/Rust.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[confused](https://github.com/visma-prodsec/confused)|Tool to check for dependency confusion vulnerabilities in multiple package management systems||[`dependency-confusion`](/categorize/tags/dependency-confusion.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[nikto](https://github.com/sullo/nikto)|Nikto web server scanner |||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqlmap](https://github.com/sqlmapproject/sqlmap)|Automatic SQL injection and database takeover tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[S3cret Scanner](https://github.com/Eilonh/s3crets_scanner)|Hunting For Secrets Uploaded To Public S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[plution](https://github.com/raverrr/plution)|Prototype pollution scanner using headless chrome|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[FockCache](https://github.com/tismayil/fockcache)|Minimalized Test Cache Poisoning||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Oralyzer](https://github.com/r0075h3ll/Oralyzer)|Open Redirection Analyzer|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Taipan](https://github.com/enkomio/Taipan)|Web application vulnerability scanner||||
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[xxeserv](https://github.com/staaldraad/xxeserv)|A mini webserver with FTP support for XXE payloads|||[](/categorize/langs/Go.md)|
|
||||
|Exploit|[Sn1per](https://github.com/1N3/Sn1per)|Automated pentest framework for offensive security experts |||[](/categorize/langs/Shell.md)|
|
||||
|Exploit|[SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja)| SQL Injection scanner||||
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[BaRMIe](https://github.com/NickstaDB/BaRMIe)|Java RMI enumeration and attack tool.||[`RMI`](/categorize/tags/RMI.md)|[](/categorize/langs/Java.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Liffy](https://github.com/mzfr/liffy)|Local file inclusion exploitation tool||[`lfi`](/categorize/tags/lfi.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Gopherus](https://github.com/tarunkant/Gopherus)|This tool generates gopher link for exploiting SSRF and gaining RCE in various servers ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[XSRFProbe](https://github.com/0xInfection/XSRFProbe)|The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.|||[](/categorize/langs/Python.md)|
|
||||
|Exploit|[ghauri](https://github.com/r0oth3x49/ghauri)|An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Exploit|[singularity](https://github.com/nccgroup/singularity)|A DNS rebinding attack framework.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[gitls](https://github.com/hahwul/gitls)|Listing git repository from URL/User/Org|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md)|[](/categorize/langs/CSS.md)|
|
||||
|Utils|[bountyplz](https://github.com/fransr/bountyplz)|Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) ||[`report`](/categorize/tags/report.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[security-crawl-maze](https://github.com/google/security-crawl-maze)|Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/HTML.md)|
|
||||
|Utils|[Phoenix](https://www.hahwul.com/p/phoenix.html)| hahwul's online tools||||
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters |||[](/categorize/langs/C#.md)|
|
||||
|Utils|[security-research-pocs](https://github.com/google/security-research-pocs)|Proof-of-concept codes created as part of security research done by Google Security Team.|||[](/categorize/langs/C++.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[wssip](https://github.com/nccgroup/wssip)|Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. ||[`wordlist`](/categorize/tags/wordlist.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[qsreplace](https://github.com/tomnomnom/qsreplace)|Accept URLs on stdin, replace all query string values with a user-supplied value |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[httptoolkit](https://github.com/httptoolkit/httptoolkit)|HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac||||
|
||||
|Utils|[PoC-in-GitHub](https://github.com/nomi-sec/PoC-in-GitHub)|📡 PoC auto collect from GitHub. Be careful malware.||||
|
||||
|Utils|[oxml_xxe](https://github.com/BuffaloWill/oxml_xxe)|A tool for embedding XXE/XML exploits into different filetypes |||[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xss-cheatsheet-data](https://github.com/PortSwigger/xss-cheatsheet-data)|This repository contains all the XSS cheatsheet data to allow contributions from the community. ||[`xss`](/categorize/tags/xss.md)||
|
||||
|Exploit|[XSRFProbe](https://github.com/0xInfection/XSRFProbe)|The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.|||[](/categorize/langs/Python.md)|
|
||||
|Exploit|[of-CORS](https://github.com/trufflesecurity/of-CORS)|Identifying and exploiting CORS misconfigurations on the internal networks||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[ropr](https://github.com/Ben-Lichtman/ropr)|A blazing fast™ multithreaded ROP Gadget finder. ropper||[`rop`](/categorize/tags/rop.md)|[](/categorize/langs/Rust.md)|
|
||||
|Exploit|[SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja)|Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities.||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Perl.md)|
|
||||
|Utils|[urlgrab](https://github.com/IAmStoxe/urlgrab)|A golang utility to spider through a website searching for additional links. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[IntruderPayloads](https://github.com/1N3/IntruderPayloads)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Atlas](https://github.com/m4ll0k/Atlas)|Quick SQLMap Tamper Suggester |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[github-regexp](https://github.com/gwen001/github-regexp)|Basically a regexp over a GitHub search.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)|A list of useful payloads and bypass for Web Application Security and Pentest/CTF |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[SequenceDiagram](https://sequencediagram.org)| Online tool for creating UML sequence diagrams||||
|
||||
|Utils|[grex](https://github.com/pemistahl/grex)|A command-line tool and library for generating regular expressions from user-provided test cases|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[autochrome](https://github.com/nccgroup/autochrome)|This tool downloads, installs, and configures a shiny new copy of Chromium.|||[](/categorize/langs/HTML.md)|
|
||||
|Utils|[hacks](https://github.com/tomnomnom/hacks)|A collection of hacks and one-off scripts |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable! |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[hurl](https://github.com/Orange-OpenSource/hurl)|Hurl, run and test HTTP requests.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. |||[](/categorize/langs/Java.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Blacklist3r](https://github.com/NotSoSecure/Blacklist3r)|project-blacklist3r |||[](/categorize/langs/C#.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[difftastic](https://github.com/Wilfred/difftastic)|a structural diff that understands syntax||[`diff`](/categorize/tags/diff.md)|[](/categorize/langs/Rust.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[CSP Evaluator](https://csp-evaluator.withgoogle.com)|Online CSP Evaluator from google||[`csp`](/categorize/tags/csp.md)||
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[curl](https://github.com/curl/curl)|A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features|||[](/categorize/langs/C.md)|
|
||||
|Utils|[pet](https://github.com/knqyf263/pet)|Simple command-line snippet manager, written in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[can-i-take-over-xyz](https://github.com/EdOverflow/can-i-take-over-xyz)|"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.||||
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[mubeng](https://github.com/kitabisa/mubeng)|An incredibly fast proxy checker & IP rotator with ease.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[CyberChef](https://github.com/gchq/CyberChef)|The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Gf-Patterns](https://github.com/1ndianl33t/Gf-Patterns)|GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic) parameters grep ||||
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[gee](https://github.com/hahwul/gee)|🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[hakcheckurl](https://github.com/hakluke/hakcheckurl)|Takes a list of URLs and returns their HTTP response codes|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[anew](https://github.com/tomnomnom/anew)|A tool for adding new lines to files, skipping duplicates|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[IntruderPayloads](https://github.com/1N3/IntruderPayloads)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[oxml_xxe](https://github.com/BuffaloWill/oxml_xxe)|A tool for embedding XXE/XML exploits into different filetypes |||[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[Findsploit](https://github.com/1N3/Findsploit)|Find exploits in local and online databases instantly||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[pet](https://github.com/knqyf263/pet)|Simple command-line snippet manager, written in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Atlas](https://github.com/m4ll0k/Atlas)|Quick SQLMap Tamper Suggester |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[xss-cheatsheet-data](https://github.com/PortSwigger/xss-cheatsheet-data)|This repository contains all the XSS cheatsheet data to allow contributions from the community. ||[`xss`](/categorize/tags/xss.md)||
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[SequenceDiagram](https://sequencediagram.org)|Online tool for creating UML sequence diagrams||[`online`](/categorize/tags/online.md)||
|
||||
|Utils|[nuclei-templates](https://github.com/projectdiscovery/nuclei-templates)|Community curated list of templates for the nuclei engine to find security vulnerabilities.||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[REcollapse](https://github.com/0xacb/recollapse)|REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications||[`fuzz`](/categorize/tags/fuzz.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[grex](https://github.com/pemistahl/grex)|A command-line tool and library for generating regular expressions from user-provided test cases|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[bruteforce-lists](https://github.com/random-robbie/bruteforce-lists)|Some files for bruteforcing certain things.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|modern, user-friendly command-line HTTP client for the API era||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gitls](https://github.com/hahwul/gitls)|Listing git repository from URL/User/Org|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|Utils|[ZipBomb](https://github.com/abdulfatir/ZipBomb)|A simple implementation of ZipBomb in Python||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[qsreplace](https://github.com/tomnomnom/qsreplace)|Accept URLs on stdin, replace all query string values with a user-supplied value |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[github-regexp](https://github.com/gwen001/github-regexp)|Basically a regexp over a GitHub search.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[missing-cve-nuclei-templates](https://github.com/edoardottt/missing-cve-nuclei-templates)|Weekly updated list of missing CVEs in nuclei templates official repository||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[cent](https://github.com/xm1k3/cent)|Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place.||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gee](https://github.com/hahwul/gee)|🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)|A list of useful payloads and bypass for Web Application Security and Pentest/CTF |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[PoC-in-GitHub](https://github.com/nomi-sec/PoC-in-GitHub)|📡 PoC auto collect from GitHub. Be careful malware.||||
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/CSS.md)|
|
||||
|Utils|[hakcheckurl](https://github.com/hakluke/hakcheckurl)|Takes a list of URLs and returns their HTTP response codes|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[nuclei-wordfence-cve](https://github.com/topscoder/nuclei-wordfence-cve)|Every single day new templates are added to this repo based on updates on Wordfence.com||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable!||[`json`](/categorize/tags/json.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[security-crawl-maze](https://github.com/google/security-crawl-maze)|Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/HTML.md)|
|
||||
|Utils|[CyberChef](https://github.com/gchq/CyberChef)|The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[dsieve](https://github.com/trickest/dsieve)|Filter and enrich a list of subdomains by level||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[difftastic](https://github.com/Wilfred/difftastic)|a structural diff that understands syntax||[`diff`](/categorize/tags/diff.md)|[](/categorize/langs/Rust.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[eoyc](https://github.com/hahwul/eoyc)|Encoding Only Your Choices||[`encode`](/categorize/tags/encode.md)|[](/categorize/langs/Crystal.md)|
|
||||
|Utils|[cf-check](https://github.com/dwisiswant0/cf-check)|Cloudflare Checker written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[wssip](https://github.com/nccgroup/wssip)|Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hurl](https://github.com/Orange-OpenSource/hurl)|Hurl, run and test HTTP requests.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Ronin](https://github.com/ronin-rb/ronin)|Ronin is a free and Open Source Ruby toolkit for security research and development.||[`payload`](/categorize/tags/payload.md) [`http`](/categorize/tags/http.md) [`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[can-i-take-over-xyz](https://github.com/EdOverflow/can-i-take-over-xyz)|"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.||||
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[mubeng](https://github.com/kitabisa/mubeng)|An incredibly fast proxy checker & IP rotator with ease.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[grc](https://github.com/garabik/grc)|generic colouriser|||[](/categorize/langs/Python.md)|
|
||||
|Env|[Crimson](https://github.com/Karmaz95/crimson)|Web Application Security Testing automation.|||[](/categorize/langs/Python.md)|
|
||||
|Env|[Glue](https://github.com/OWASP/glue)|Application Security Automation|||[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[security-research-pocs](https://github.com/google/security-research-pocs)|Proof-of-concept codes created as part of security research done by Google Security Team.|||[](/categorize/langs/C++.md)|
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[GadgetProbe](https://github.com/BishopFox/GadgetProbe)|Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[SerializationDumper](https://github.com/NickstaDB/SerializationDumper)|A tool to dump Java serialization streams in a more human readable form.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[zip-bomb](https://github.com/damianrusinek/zip-bomb)|Create a ZIPBomb for a given uncompressed size (flat and nested modes).||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Clipboard](https://github.com/Slackadays/Clipboard)|An external brain that remembers anything, anytime, anywhere.||[`clipboard`](/categorize/tags/clipboard.md)|[](/categorize/langs/C++.md)|
|
||||
|Utils|[hoppscotch](https://github.com/hoppscotch/hoppscotch)|Open source API development ecosystem||[`http`](/categorize/tags/http.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[autochrome](https://github.com/nccgroup/autochrome)|This tool downloads, installs, and configures a shiny new copy of Chromium.|||[](/categorize/langs/HTML.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[CSP Evaluator](https://csp-evaluator.withgoogle.com)|Online CSP Evaluator from google||[`csp`](/categorize/tags/csp.md)||
|
||||
|Utils|[httptoolkit](https://github.com/httptoolkit/httptoolkit)|HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac||||
|
||||
|Utils|[curl](https://github.com/curl/curl)|A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features|||[](/categorize/langs/C.md)|
|
||||
|Utils|[bountyplz](https://github.com/fransr/bountyplz)|Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) ||[`report`](/categorize/tags/report.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[Blacklist3r](https://github.com/NotSoSecure/Blacklist3r)|project-blacklist3r |||[](/categorize/langs/C%23.md)|
|
||||
|Utils|[anew](https://github.com/tomnomnom/anew)|A tool for adding new lines to files, skipping duplicates|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hacks](https://github.com/tomnomnom/hacks)|A collection of hacks and one-off scripts |||[](/categorize/langs/Go.md)|
|
||||
|Env|[pentest-env](https://github.com/Sliim/pentest-env)|Pentest environment deployer (kali linux + targets) using vagrant and chef.||[`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Env|[Glue](https://github.com/OWASP/glue)|Application Security Automation|||[](/categorize/langs/Ruby.md)|
|
||||
|Env|[Crimson](https://github.com/Karmaz95/crimson)|Web Application Security Testing automation.|||[](/categorize/langs/Python.md)|
|
||||
|
||||
### Bookmarklets
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
|
|
@ -317,64 +357,71 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
### Browser Addons
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[DotGit](https://github.com/davtur19/DotGit)|An extension for checking if .git is exposed in visited websites|||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[Wayback Machine](https://apps.apple.com/us/app/wayback-machine/id1472432422)|History of website||||
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[DotGit](https://github.com/davtur19/DotGit)|An extension for checking if .git is exposed in visited websites|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[clear-cache](https://github.com/TenSoja/clear-cache)|Add-on to clear browser cache with a single click or via the F9 key.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Dark Reader](https://github.com/darkreader/darkreader)|Dark mode to any site||[`darkmode`](/categorize/tags/darkmode.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome||||
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Hack-Tools](https://github.com/LasCC/Hack-Tools)|The all-in-one Red Team extension for Web Pentester 🛠|||[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Edit-This-Cookie](https://github.com/ETCExtensions/Edit-This-Cookie)|EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[User-Agent Switcher](https://addons.mozilla.org/ko/firefox/addon/user-agent-switcher-revived/)|quick and easy way to switch between user-agents.||||
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Dark Reader for Safari](https://apps.apple.com/us/app/dark-reader-for-safari/id1438243180)|Dark mode to any site||||
|
||||
|Utils|[Dark Reader](https://github.com/darkreader/darkreader)|Dark mode to any site||[`darkmode`](/categorize/tags/darkmode.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[User-Agent Switcher](https://addons.mozilla.org/ko/firefox/addon/user-agent-switcher-revived/)|quick and easy way to switch between user-agents.||||
|
||||
|Utils|[Hack-Tools](https://github.com/LasCC/Hack-Tools)|The all-in-one Red Team extension for Web Pentester 🛠|||[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Firefox Multi-Account Containers](https://github.com/mozilla/multi-account-containers)|Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[PwnFox](https://github.com/yeswehack/PwnFox)|Firefox/Burp extension that provide usefull tools for your security audit.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[firefox-container-proxy](https://github.com/bekh6ex/firefox-container-proxy)|Assign a proxy to a Firefox container|||[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
### Burpsuite and ZAP Addons
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[BurpSuite-Secret_Finder](https://github.com/m4ll0k/BurpSuite-Secret_Finder)|||||
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[reflected-parameters](https://github.com/PortSwigger/reflected-parameters)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[BurpSuite-Secret_Finder](https://github.com/m4ll0k/BurpSuite-Secret_Finder)|||||
|
||||
|Recon|[HUNT](https://github.com/bugcrowd/HUNT)|Identifies common parameters vulnerable to certain vulnerability classes||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Kotlin.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)||||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|Param Miner||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[GAP](https://github.com/xnl-h4ck3r/GAP-Burp-Extension)|This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links to try these parameters on.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[csp-auditor](https://github.com/GoSecure/csp-auditor)|||[`csp`](/categorize/tags/csp.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[safecopy](https://github.com/yashrs/safecopy)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Decoder-Improved](https://github.com/nccgroup/Decoder-Improved)|Improved decoder for Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpBounty](https://github.com/wagiro/BurpBounty)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[turbo-intruder](https://github.com/PortSwigger/turbo-intruder)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[pcap-burp](https://github.com/nccgroup/pcap-burp)|Pcap importer for Burp|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Stepper](https://github.com/CoreyD97/Stepper)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer)|Because just a dark theme wasn't enough!|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[knife](https://github.com/bit4woo/knife)|A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅|||[](/categorize/langs/Java.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpBounty](https://github.com/wagiro/BurpBounty)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-piper](https://github.com/silentsignal/burp-piper)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|utils|[Neonmarker](https://github.com/kingthorin/neonmarker)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[safecopy](https://github.com/yashrs/safecopy)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[burp-exporter](https://github.com/artssec/burp-exporter)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[burp-send-to](https://github.com/bytebutcher/burp-send-to)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotiln.md)|
|
||||
|Utils|[community-scripts](https://github.com/zaproxy/community-scripts)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer)|A Burp Extension designed to identify argument injection vulnerabilities.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Decoder-Improved](https://github.com/nccgroup/Decoder-Improved)|Improved decoder for Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Berserko](https://github.com/nccgroup/Berserko)|Burp Suite extension to perform Kerberos authentication|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-send-to](https://github.com/bytebutcher/burp-send-to)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Map Local](https://github.com/Keindel/owasp-zap-maplocal-addon)|ZAP add-on which allows mapping of responses to content of a chosen local file.|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer)|A Burp Extension designed to identify argument injection vulnerabilities.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[turbo-intruder](https://github.com/PortSwigger/turbo-intruder)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[pcap-burp](https://github.com/nccgroup/pcap-burp)|Pcap importer for Burp|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Web3 Decoder](https://github.com/nccgroup/web3-decoder)|Burp Extension for Web3||[`web3`](/categorize/tags/web3.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[knife](https://github.com/bit4woo/knife)|A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Stepper](https://github.com/CoreyD97/Stepper)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-piper](https://github.com/silentsignal/burp-piper)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer)|Because just a dark theme wasn't enough!|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[HTTPSignatures](https://github.com/nccgroup/HTTPSignatures)|A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[community-scripts](https://github.com/zaproxy/community-scripts)||||[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
## Thanks to (Contributor)
|
||||
WHW's open-source project and made it with ❤️ if you want contribute this project, please see [CONTRIBUTING.md](https://github.com/hahwul/WebHackersWeapons/blob/main/CONTRIBUTING.md) and Pull-Request with cool your contents.
|
||||
|
|
|
|||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[BurpBounty](https://github.com/wagiro/BurpBounty)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[IntruderPayloads](https://github.com/1N3/IntruderPayloads)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|Utils|[BurpBounty](https://github.com/wagiro/BurpBounty)||||[](/categorize/langs/BlitzBasic.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters |||[](/categorize/langs/C#.md)|
|
||||
|Utils|[Blacklist3r](https://github.com/NotSoSecure/Blacklist3r)|project-blacklist3r |||[](/categorize/langs/C#.md)|
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|Utils|[Blacklist3r](https://github.com/NotSoSecure/Blacklist3r)|project-blacklist3r |||[](/categorize/langs/C%23.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,4 +4,5 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[security-research-pocs](https://github.com/google/security-research-pocs)|Proof-of-concept codes created as part of security research done by Google Security Team.|||[](/categorize/langs/C++.md)|
|
||||
|Utils|[Clipboard](https://github.com/Slackadays/Clipboard)|An external brain that remembers anything, anytime, anywhere.||[`clipboard`](/categorize/tags/clipboard.md)|[](/categorize/langs/C++.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,8 +4,8 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[hashcat](https://github.com/hashcat/hashcat/)|World's fastest and most advanced password recovery utility |||[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[thc-hydra](https://github.com/vanhauser-thc/thc-hydra)|hydra |||[](/categorize/langs/C.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Utils|[curl](https://github.com/curl/curl)|A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features|||[](/categorize/langs/C.md)|
|
||||
|
|
|
|||
|
|
@ -3,5 +3,5 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md)|[](/categorize/langs/CSS.md)|
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/CSS.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,8 @@
|
|||
|
||||
## Tools Made of Crystal
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[noir](https://github.com/hahwul/noir)|♠️ Noir is an attack surface detector form source code.||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Crystal.md)|
|
||||
|Utils|[eoyc](https://github.com/hahwul/eoyc)|Encoding Only Your Choices||[`encode`](/categorize/tags/encode.md)|[](/categorize/langs/Crystal.md)|
|
||||
|
||||
|
|
@ -4,105 +4,115 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[jaeles](https://github.com/jaeles-project/jaeles)|The Swiss Army knife for automated Web Application Testing ||[`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[haktrails](https://github.com/hakluke/haktrails)|Golang client for querying SecurityTrails API data|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[Glorp](https://github.com/denandz/glorp)|A CLI-based HTTP intercept and replay proxy||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-endpoints](https://github.com/gwen001/github-endpoints)|Find endpoints on GitHub.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[go-dork](https://github.com/dwisiswant0/go-dork)|The fastest dork scanner written in Go. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[meg](https://github.com/tomnomnom/meg)|Fetch many paths for many hosts - without killing the hosts |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[uncover](https://github.com/projectdiscovery/uncover)|Quickly discover exposed hosts on the internet using multiple search engine.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[aquatone](https://github.com/michenriksen/aquatone)|A Tool for Domain Flyovers ||[`domain`](/categorize/tags/domain.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[github-subdomains](https://github.com/gwen001/github-subdomains)|Find subdomains on GitHub|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[hakrevdns](https://github.com/hakluke/hakrevdns)|Small, fast tool for performing reverse DNS lookups en masse. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[Osmedeus](https://github.com/j3ssie/Osmedeus)|Fully automated offensive security framework for reconnaissance and vulnerability scanning |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[go-dork](https://github.com/dwisiswant0/go-dork)|The fastest dork scanner written in Go. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[shosubgo](https://github.com/incogbyte/shosubgo)|Small tool to Grab subdomains using Shodan api.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[haktrails](https://github.com/hakluke/haktrails)|Golang client for querying SecurityTrails API data|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[chaos-client](https://github.com/projectdiscovery/chaos-client)|Go client to communicate with Chaos DNS API. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[jsluice](https://github.com/BishopFox/jsluice)|Extract URLs, paths, secrets, and other interesting bits from JavaScript||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gowitness](https://github.com/sensepost/gowitness)|🔍 gowitness - a golang, web screenshot utility using Chrome Headless |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[scilla](https://github.com/edoardottt/scilla)|🏴☠️ Information Gathering tool 🏴☠️ dns/subdomain/port enumeration|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[aquatone](https://github.com/michenriksen/aquatone)|A Tool for Domain Flyovers ||[`domain`](/categorize/tags/domain.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[jwt-hack](https://github.com/hahwul/jwt-hack)|🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[ffuf](https://github.com/ffuf/ffuf)|Fast web fuzzer written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[medusa](https://github.com/riza/medusa)|Fastest recursive HTTP fuzzer, like a Ferrari. |||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[kiterunner](https://github.com/assetnote/kiterunner)|Contextual Content Discovery Tool|||[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[httprobe](https://github.com/tomnomnom/httprobe)|Take a list of domains and probe for working HTTP and HTTPS servers |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[fockcache](https://github.com/tismayil/fockcache)|FockCache - Minimalized Test Cache Poisoning|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nuclei](https://github.com/projectdiscovery/nuclei)|Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[plution](https://github.com/raverrr/plution)|Prototype pollution scanner using headless chrome|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[httprobe](https://github.com/tomnomnom/httprobe)|Take a list of domains and probe for working HTTP and HTTPS servers |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nosqli](https://github.com/Charlie-belmer/nosqli)|NoSql Injection CLI tool|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[nuclei](https://github.com/projectdiscovery/nuclei)|Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ditto](https://github.com/evilsocket/ditto)|A tool for IDN homograph attacks and detection.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[gitleaks](https://github.com/zricethezav/gitleaks)|Scan git repos (or files) for secrets using regex and entropy 🔑|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[headi](https://github.com/mlcsec/headi)|Customisable and automated HTTP header injection|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[confused](https://github.com/visma-prodsec/confused)|Tool to check for dependency confusion vulnerabilities in multiple package management systems||[`dependency-confusion`](/categorize/tags/dependency-confusion.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[plution](https://github.com/raverrr/plution)|Prototype pollution scanner using headless chrome|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[FockCache](https://github.com/tismayil/fockcache)|Minimalized Test Cache Poisoning||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[hinject](https://github.com/dwisiswant0/hinject)|Host Header Injection Checker |||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ppmap](https://github.com/kleiton0x00/ppmap)|A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.|||[](/categorize/langs/Go.md)|
|
||||
|Exploit|[xxeserv](https://github.com/staaldraad/xxeserv)|A mini webserver with FTP support for XXE payloads|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gitls](https://github.com/hahwul/gitls)|Listing git repository from URL/User/Org|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[qsreplace](https://github.com/tomnomnom/qsreplace)|Accept URLs on stdin, replace all query string values with a user-supplied value |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlgrab](https://github.com/IAmStoxe/urlgrab)|A golang utility to spider through a website searching for additional links. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[github-regexp](https://github.com/gwen001/github-regexp)|Basically a regexp over a GitHub search.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hacks](https://github.com/tomnomnom/hacks)|A collection of hacks and one-off scripts |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable! |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[pet](https://github.com/knqyf263/pet)|Simple command-line snippet manager, written in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[mubeng](https://github.com/kitabisa/mubeng)|An incredibly fast proxy checker & IP rotator with ease.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[nuclei-templates](https://github.com/projectdiscovery/nuclei-templates)|Community curated list of templates for the nuclei engine to find security vulnerabilities.||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gitls](https://github.com/hahwul/gitls)|Listing git repository from URL/User/Org|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[qsreplace](https://github.com/tomnomnom/qsreplace)|Accept URLs on stdin, replace all query string values with a user-supplied value |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[github-regexp](https://github.com/gwen001/github-regexp)|Basically a regexp over a GitHub search.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[cent](https://github.com/xm1k3/cent)|Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place.||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gee](https://github.com/hahwul/gee)|🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gotator](https://github.com/Josue87/gotator)|Gotator is a tool to generate DNS wordlists through permutations.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[Emissary](https://github.com/BountyStrike/Emissary)|Send notifications on different channels such as Slack, Telegram, Discord etc.||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hakcheckurl](https://github.com/hakluke/hakcheckurl)|Takes a list of URLs and returns their HTTP response codes|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[anew](https://github.com/tomnomnom/anew)|A tool for adding new lines to files, skipping duplicates|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable!||[`json`](/categorize/tags/json.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[dsieve](https://github.com/trickest/dsieve)|Filter and enrich a list of subdomains by level||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[cf-check](https://github.com/dwisiswant0/cf-check)|Cloudflare Checker written in Go |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[slackcat](https://github.com/bcicen/slackcat)|CLI utility to post files and command output to slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[mubeng](https://github.com/kitabisa/mubeng)|An incredibly fast proxy checker & IP rotator with ease.|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[fzf](https://github.com/junegunn/fzf)|A command-line fuzzy finder|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[gf](https://github.com/tomnomnom/gf)|A wrapper around grep, to help you grep for things |||[](/categorize/langs/Go.md)|
|
||||
|Utils|[anew](https://github.com/tomnomnom/anew)|A tool for adding new lines to files, skipping duplicates|||[](/categorize/langs/Go.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[hacks](https://github.com/tomnomnom/hacks)|A collection of hacks and one-off scripts |||[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,33 +3,38 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[reflected-parameters](https://github.com/PortSwigger/reflected-parameters)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|Param Miner||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[csp-auditor](https://github.com/GoSecure/csp-auditor)|||[`csp`](/categorize/tags/csp.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Exploit|[BaRMIe](https://github.com/NickstaDB/BaRMIe)|Java RMI enumeration and attack tool.||[`RMI`](/categorize/tags/RMI.md)|[](/categorize/langs/Java.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus)||||[](/categorize/langs/Java.md)|
|
||||
|utils|[Neonmarker](https://github.com/kingthorin/neonmarker)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[safecopy](https://github.com/yashrs/safecopy)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Decoder-Improved](https://github.com/nccgroup/Decoder-Improved)|Improved decoder for Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[zap-hud](https://github.com/zaproxy/zap-hud)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Berserko](https://github.com/nccgroup/Berserko)|Burp Suite extension to perform Kerberos authentication|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-send-to](https://github.com/bytebutcher/burp-send-to)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Map Local](https://github.com/Keindel/owasp-zap-maplocal-addon)|ZAP add-on which allows mapping of responses to content of a chosen local file.|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[AWSSigner](https://github.com/NetSPI/AWSSigner)|Burp Extension for AWS Signing|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[pcap-burp](https://github.com/nccgroup/pcap-burp)|Pcap importer for Burp|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Web3 Decoder](https://github.com/nccgroup/web3-decoder)|Burp Extension for Web3||[`web3`](/categorize/tags/web3.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[GadgetProbe](https://github.com/BishopFox/GadgetProbe)|Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[SerializationDumper](https://github.com/NickstaDB/SerializationDumper)|A tool to dump Java serialization streams in a more human readable form.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[knife](https://github.com/bit4woo/knife)|A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Stepper](https://github.com/CoreyD97/Stepper)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer)|Because just a dark theme wasn't enough!|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[knife](https://github.com/bit4woo/knife)|A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. |||[](/categorize/langs/Java.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[http-script-generator](https://github.com/h3xstream/http-script-generator)||||[](/categorize/langs/Java.md)|
|
||||
|utils|[Neonmarker](https://github.com/kingthorin/neonmarker)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|Automated HTTP Request Repeating With Burp Suite|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[burp-send-to](https://github.com/bytebutcher/burp-send-to)||||[](/categorize/langs/Java.md)|
|
||||
|Utils|[Berserko](https://github.com/nccgroup/Berserko)|Burp Suite extension to perform Kerberos authentication|||[](/categorize/langs/Java.md)|
|
||||
|Utils|[HTTPSignatures](https://github.com/nccgroup/HTTPSignatures)|A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.|||[](/categorize/langs/Java.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,30 +3,36 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[rengine](https://github.com/yogeshojha/rengine)|reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[DotGit](https://github.com/davtur19/DotGit)|An extension for checking if .git is exposed in visited websites|||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[singularity](https://github.com/nccgroup/singularity)|A DNS rebinding attack framework.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[clear-cache](https://github.com/TenSoja/clear-cache)|Add-on to clear browser cache with a single click or via the F9 key.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[wssip](https://github.com/nccgroup/wssip)|Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Edit-This-Cookie](https://github.com/ETCExtensions/Edit-This-Cookie)|EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[quickjack](https://github.com/samyk/quickjack)|Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[CyberChef](https://github.com/gchq/CyberChef)|The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[wssip](https://github.com/nccgroup/wssip)|Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Firefox Multi-Account Containers](https://github.com/mozilla/multi-account-containers)|Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[PwnFox](https://github.com/yeswehack/PwnFox)|Firefox/Burp extension that provide usefull tools for your security audit.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[template-generator](https://github.com/fransr/template-generator)|A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[firefox-container-proxy](https://github.com/bekh6ex/firefox-container-proxy)|Assign a proxy to a Firefox container|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[community-scripts](https://github.com/zaproxy/community-scripts)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -1,7 +0,0 @@
|
|||
|
||||
## Tools Made of Kotiln
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotiln.md)|
|
||||
|
||||
|
|
@ -4,6 +4,7 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[HUNT](https://github.com/bugcrowd/HUNT)|Identifies common parameters vulnerable to certain vulnerability classes||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[reflect](https://github.com/cak/reflect)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[turbo-intruder](https://github.com/PortSwigger/turbo-intruder)||||[](/categorize/langs/Kotlin.md)|
|
||||
|Utils|[burp-piper](https://github.com/silentsignal/burp-piper)||||[](/categorize/langs/Kotlin.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,5 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. ||[`wordlist`](/categorize/tags/wordlist.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -6,4 +6,5 @@
|
|||
|Fuzzer|[dotdotpwn](https://github.com/wireghoul/dotdotpwn)|DotDotPwn - The Directory Traversal Fuzzer ||[`path-traversal`](/categorize/tags/path-traversal.md)|[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[HRS](https://github.com/SafeBreach-Labs/HRS)|HTTP Request Smuggling demonstration Perl script, for variants 1, 2 and 5 in my BlackHat US 2020 paper HTTP Request Smuggling in 2020.|||[](/categorize/langs/Perl.md)|
|
||||
|Scanner|[nikto](https://github.com/sullo/nikto)|Nikto web server scanner |||[](/categorize/langs/Perl.md)|
|
||||
|Exploit|[SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja)|Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities.||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Perl.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,82 +4,101 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[OneForAll](https://github.com/shmilylty/OneForAll)|OneForAll是一款功能强大的子域收集工具 |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[HydraRecon](https://github.com/aufzayed/HydraRecon)|All In One, Fast, Easy Recon Tool|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[STEWS](https://github.com/PalindromeLabs/STEWS)|A Security Tool for Enumerating WebSockets|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[HydraRecon](https://github.com/aufzayed/HydraRecon)|All In One, Fast, Easy Recon Tool|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)||||[](/categorize/langs/Python.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[HostHunter](https://github.com/SpiderLabs/HostHunter)|Recon tool for discovering hostnames using OSINT techniques.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[OneForAll](https://github.com/shmilylty/OneForAll)|OneForAll是一款功能强大的子域收集工具 |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md) [`url`](/categorize/tags/url.md) [`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[SSTImap](https://github.com/vladko312/SSTImap)|Automatic SSTI detection tool with interactive interface||[`ssti`](/categorize/tags/ssti.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[ParamPamPam](https://github.com/Bo0oM/ParamPamPam)|This tool for brute discover GET and POST parameters.||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GAP](https://github.com/xnl-h4ck3r/GAP-Burp-Extension)|This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links to try these parameters on.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[wfuzz](https://github.com/xmendez/wfuzz)|Web application fuzzer |||[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[gitGraber](https://github.com/hisxo/gitGraber)|gitGraber |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Striker](https://github.com/s0md3v/Striker)|Striker is an offensive information and vulnerability scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[deadlinks](https://github.com/butuzov/deadlinks)|Health checks for your documentation links.||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqlmap](https://github.com/sqlmapproject/sqlmap)|Automatic SQL injection and database takeover tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[OpenRedireX](https://github.com/devanshbatham/OpenRedireX)|A Fuzzer for OpenRedirect issues|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Autorize](https://github.com/Quitten/Autorize)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[VHostScan](https://github.com/codingo/VHostScan)|A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[zap-cli](https://github.com/Grunny/zap-cli)|A simple tool for interacting with OWASP ZAP from the commandline. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[deadlinks](https://github.com/butuzov/deadlinks)|Health checks for your documentation links.||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[http-request-smuggling](https://github.com/anshumanpattnaik/http-request-smuggling)|HTTP Request Smuggling Detection Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[tplmap](https://github.com/epinna/tplmap)|Server-Side Template Injection and Code Injection Detection and Exploitation Tool|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Striker](https://github.com/s0md3v/Striker)|Striker is an offensive information and vulnerability scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[NoSQLMap](https://github.com/codingo/NoSQLMap)|Automated NoSQL database enumeration and web application exploitation tool. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3cret Scanner](https://github.com/Eilonh/s3crets_scanner)|Hunting For Secrets Uploaded To Public S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Oralyzer](https://github.com/r0075h3ll/Oralyzer)|Open Redirection Analyzer|||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AuthMatrix](https://github.com/SecurityInnovation/AuthMatrix)|||[`aaa`](/categorize/tags/aaa.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[gitGraber](https://github.com/hisxo/gitGraber)|gitGraber |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[LFISuite](https://github.com/D35m0nd142/LFISuite)|Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[rapidscan](https://github.com/skavngr/rapidscan)|The Multi-Tool Web Vulnerability Scanner. |||[](/categorize/langs/Python.md)|
|
||||
|Scanner|[commix](https://github.com/commixproject/commix)|Automated All-in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Liffy](https://github.com/mzfr/liffy)|Local file inclusion exploitation tool||[`lfi`](/categorize/tags/lfi.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[Gopherus](https://github.com/tarunkant/Gopherus)|This tool generates gopher link for exploiting SSRF and gaining RCE in various servers ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[ghauri](https://github.com/r0oth3x49/ghauri)|An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[XSRFProbe](https://github.com/0xInfection/XSRFProbe)|The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[of-CORS](https://github.com/trufflesecurity/of-CORS)|Identifying and exploiting CORS misconfigurations on the internal networks||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Atlas](https://github.com/m4ll0k/Atlas)|Quick SQLMap Tamper Suggester |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)|A list of useful payloads and bypass for Web Application Security and Pentest/CTF |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[REcollapse](https://github.com/0xacb/recollapse)|REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications||[`fuzz`](/categorize/tags/fuzz.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Bug-Bounty-Toolz](https://github.com/m4ll0k/Bug-Bounty-Toolz)|BBT - Bug Bounty Tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|modern, user-friendly command-line HTTP client for the API era||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[burp-exporter](https://github.com/artssec/burp-exporter)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[ZipBomb](https://github.com/abdulfatir/ZipBomb)|A simple implementation of ZipBomb in Python||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)|A list of useful payloads and bypass for Web Application Security and Pentest/CTF |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[pentest-tools](https://github.com/gwen001/pentest-tools)|Custom pentesting tools |||[](/categorize/langs/Python.md)|
|
||||
|Utils|[nuclei-wordfence-cve](https://github.com/topscoder/nuclei-wordfence-cve)|Every single day new templates are added to this repo based on updates on Wordfence.com||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Redcloud](https://github.com/khast3x/Redcloud)|Automated Red Team Infrastructure deployement using Docker||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[argumentinjectionhammer](https://github.com/nccgroup/argumentinjectionhammer)|A Burp Extension designed to identify argument injection vulnerabilities.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[blackboxprotobuf](https://github.com/nccgroup/blackboxprotobuf)|Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[femida](https://github.com/wish-i-was/femida)||||[](/categorize/langs/Python.md)|
|
||||
|Utils|[grc](https://github.com/garabik/grc)|generic colouriser|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[tiscripts](https://github.com/defparam/tiscripts)|Turbo Intruder Scripts|||[](/categorize/langs/Python.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[zip-bomb](https://github.com/damianrusinek/zip-bomb)|Create a ZIPBomb for a given uncompressed size (flat and nested modes).||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[inql](https://github.com/doyensec/inql)||||[](/categorize/langs/Python.md)|
|
||||
|Env|[Crimson](https://github.com/Karmaz95/crimson)|Web Application Security Testing automation.|||[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -7,13 +7,15 @@
|
|||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[Hunt3r](https://github.com/EasyRecon/Hunt3r)|Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework|||[](/categorize/langs/Ruby.md)|
|
||||
|Recon|[intrigue-core](https://github.com/intrigueio/intrigue-core)|Discover Your Attack Surface |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[arachni](https://github.com/Arachni/arachni)|Web Application Security Scanner Framework |||[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[DeadFinder](https://github.com/hahwul/deadfinder)|Find dead-links (broken links)||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[oxml_xxe](https://github.com/BuffaloWill/oxml_xxe)|A tool for embedding XXE/XML exploits into different filetypes |||[](/categorize/langs/Ruby.md)|
|
||||
|Env|[Glue](https://github.com/OWASP/glue)|Application Security Automation|||[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[Ronin](https://github.com/ronin-rb/ronin)|Ronin is a free and Open Source Ruby toolkit for security research and development.||[`payload`](/categorize/tags/payload.md) [`http`](/categorize/tags/http.md) [`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Env|[pentest-env](https://github.com/Sliim/pentest-env)|Pentest environment deployer (kali linux + targets) using vagrant and chef.||[`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Env|[Glue](https://github.com/OWASP/glue)|Application Security Automation|||[](/categorize/langs/Ruby.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,17 +4,17 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[sn0int](https://github.com/kpcyrd/sn0int)|Semi-automatic OSINT framework and package manager||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[x8](https://github.com/Sh1Yo/x8)|Hidden parameters discovery suite|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[fhc](https://github.com/Edu4rdSHL/fhc)|Fast HTTP Checker.|||[](/categorize/langs/Rust.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[feroxbuster](https://github.com/epi052/feroxbuster)|A fast, simple, recursive content discovery tool written in Rust.|||[](/categorize/langs/Rust.md)|
|
||||
|Fuzzer|[ppfuzz](https://github.com/dwisiswant0/ppfuzz)|A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀|||[](/categorize/langs/Rust.md)|
|
||||
|Exploit|[ropr](https://github.com/Ben-Lichtman/ropr)|A blazing fast™ multithreaded ROP Gadget finder. ropper||[`rop`](/categorize/tags/rop.md)|[](/categorize/langs/Rust.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[grex](https://github.com/pemistahl/grex)|A command-line tool and library for generating regular expressions from user-provided test cases|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[hurl](https://github.com/Orange-OpenSource/hurl)|Hurl, run and test HTTP requests.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[difftastic](https://github.com/Wilfred/difftastic)|a structural diff that understands syntax||[`diff`](/categorize/tags/diff.md)|[](/categorize/langs/Rust.md)|
|
||||
|Utils|[bat](https://github.com/sharkdp/bat)|A cat(1) clone with wings.|||[](/categorize/langs/Rust.md)|
|
||||
|Utils|[hurl](https://github.com/Orange-OpenSource/hurl)|Hurl, run and test HTTP requests.|||[](/categorize/langs/Rust.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,19 +4,20 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[axiom](https://github.com/pry0cc/axiom)|A dynamic infrastructure toolkit for red teamers and bug bounty hunters! ||[`infra`](/categorize/tags/infra.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[crlfuzz](https://github.com/dwisiswant0/crlfuzz)|A fast tool to scan CRLF vulnerability written in Go ||[`crlf`](/categorize/tags/crlf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[BruteX](https://github.com/1N3/BruteX)|Automatically brute force all services running on a target.|||[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port |||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[crlfuzz](https://github.com/dwisiswant0/crlfuzz)|A fast tool to scan CRLF vulnerability written in Go ||[`crlf`](/categorize/tags/crlf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[SSRFire](https://github.com/ksharinarayanan/SSRFire)|An automated SSRF finder. Just give the domain name and your server and chill||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019|||[](/categorize/langs/Shell.md)|
|
||||
|Exploit|[Sn1per](https://github.com/1N3/Sn1per)|Automated pentest framework for offensive security experts |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[bountyplz](https://github.com/fransr/bountyplz)|Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) ||[`report`](/categorize/tags/report.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[Findsploit](https://github.com/1N3/Findsploit)|Find exploits in local and online databases instantly||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[bountyplz](https://github.com/fransr/bountyplz)|Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) ||[`report`](/categorize/tags/report.md)|[](/categorize/langs/Shell.md)|
|
||||
|Utils|[pwncat](https://github.com/cytopia/pwncat)|pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |||[](/categorize/langs/Shell.md)|
|
||||
|Utils|[ob_hacky_slack](https://github.com/openbridge/ob_hacky_slack)|Hacky Slack - a bash script that sends beautiful messages to Slack||[`notify`](/categorize/tags/notify.md)|[](/categorize/langs/Shell.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,9 @@
|
|||
|
||||
## Tools Made of Txt
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[bruteforce-lists](https://github.com/random-robbie/bruteforce-lists)|Some files for bruteforcing certain things.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[missing-cve-nuclei-templates](https://github.com/edoardottt/missing-cve-nuclei-templates)|Weekly updated list of missing CVEs in nuclei templates official repository||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|
||||
|
|
@ -3,7 +3,9 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[Dark Reader](https://github.com/darkreader/darkreader)|Dark mode to any site||[`darkmode`](/categorize/tags/darkmode.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[Hack-Tools](https://github.com/LasCC/Hack-Tools)|The all-in-one Red Team extension for Web Pentester 🛠|||[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[hoppscotch](https://github.com/hoppscotch/hoppscotch)|Open source API development ecosystem||[`http`](/categorize/tags/http.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DirDar](https://github.com/M4DM0e/DirDar)|DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[dontgo403](https://github.com/devploit/dontgo403)|Tool to bypass 40X response codes.||[`403`](/categorize/tags/403.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,7 @@
|
|||
|
||||
## Tools for RMI
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Exploit|[BaRMIe](https://github.com/NickstaDB/BaRMIe)|Java RMI enumeration and attack tool.||[`RMI`](/categorize/tags/RMI.md)|[](/categorize/langs/Java.md)|
|
||||
|
||||
|
|
@ -3,5 +3,5 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md) [`url`](/categorize/tags/url.md) [`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,12 @@
|
|||
|
||||
## Tools for blind-xss
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|
||||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[DeadFinder](https://github.com/hahwul/deadfinder)|Find dead-links (broken links)||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[deadlinks](https://github.com/butuzov/deadlinks)|Health checks for your documentation links.||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DeadFinder](https://github.com/hahwul/deadfinder)|Find dead-links (broken links)||[`broken-link`](/categorize/tags/broken-link.md)|[](/categorize/langs/Ruby.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,12 @@
|
|||
|
||||
## Tools for cache-vuln
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|Param Miner||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[ParamPamPam](https://github.com/Bo0oM/ParamPamPam)|This tool for brute discover GET and POST parameters.||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[Web-Cache-Vulnerability-Scanner](https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner)|Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[autopoisoner](https://github.com/Th0h0/autopoisoner)|Web cache poisoning vulnerability scanner.||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[FockCache](https://github.com/tismayil/fockcache)|Minimalized Test Cache Poisoning||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
|
||||
## Tools for clipboard
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[Clipboard](https://github.com/Slackadays/Clipboard)|An external brain that remembers anything, anytime, anywhere.||[`clipboard`](/categorize/tags/clipboard.md)|[](/categorize/langs/C++.md)|
|
||||
|
||||
|
|
@ -3,6 +3,6 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Edit-This-Cookie](https://github.com/ETCExtensions/Edit-This-Cookie)|EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[cookie-quick-manager](https://github.com/ysard/cookie-quick-manager)|An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.||[`cookie`](/categorize/tags/cookie.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,6 +4,7 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[Corsy](https://github.com/s0md3v/Corsy)|CORS Misconfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[CorsMe](https://github.com/Shivangx01b/CorsMe)|Cross Origin Resource Sharing MisConfiguration Scanner ||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[of-CORS](https://github.com/trufflesecurity/of-CORS)|Identifying and exploiting CORS misconfigurations on the internal networks||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,9 +3,13 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[hakrawler](https://github.com/hakluke/hakrawler)|Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[crawlergo](https://github.com/Qianlitp/crawlergo)|A powerful browser crawler for web vulnerability scanners||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[cariddi](https://github.com/edoardottt/cariddi)|Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gospider](https://github.com/jaeles-project/gospider)|Gospider - Fast web spider written in Go ||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[katana](https://github.com/projectdiscovery/katana)|A next-generation crawling and spidering framework.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[security-crawl-maze](https://github.com/google/security-crawl-maze)|Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.||[`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/HTML.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,10 @@
|
|||
|
||||
## Tools for deserialize
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[ysoserial.net](https://github.com/pwntester/ysoserial.net)|Deserialization payload generator for a variety of .NET formatters ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/C%23.md)|
|
||||
|Utils|[GadgetProbe](https://github.com/BishopFox/GadgetProbe)|Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[SerializationDumper](https://github.com/NickstaDB/SerializationDumper)|A tool to dump Java serialization streams in a more human readable form.||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[ysoserial](https://github.com/frohoff/ysoserial)|A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. ||[`deserialize`](/categorize/tags/deserialize.md)|[](/categorize/langs/Java.md)|
|
||||
|
||||
|
|
@ -5,11 +5,12 @@
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[zdns](https://github.com/zmap/zdns)|Fast CLI DNS Lookup Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[shuffledns](https://github.com/projectdiscovery/shuffledns)|shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsprobe](https://github.com/projectdiscovery/dnsprobe)|DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[rusolver](https://github.com/Edu4rdSHL/rusolver)|Fast and accurate DNS resolver.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[dnsvalidator](https://github.com/vortexau/dnsvalidator)|Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dnsx](https://github.com/projectdiscovery/dnsx)|dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md)||
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,10 @@
|
|||
|
||||
## Tools for documents
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[bruteforce-lists](https://github.com/random-robbie/bruteforce-lists)|Some files for bruteforcing certain things.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/CSS.md)|
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
|
||||
## Tools for encode
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[eoyc](https://github.com/hahwul/eoyc)|Encoding Only Your Choices||[`encode`](/categorize/tags/encode.md)|[](/categorize/langs/Crystal.md)|
|
||||
|
||||
|
|
@ -3,6 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[noir](https://github.com/hahwul/noir)|♠️ Noir is an attack surface detector form source code.||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Crystal.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md) [`url`](/categorize/tags/url.md) [`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,7 @@
|
|||
|
||||
## Tools for fuzz
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[REcollapse](https://github.com/0xacb/recollapse)|REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications||[`fuzz`](/categorize/tags/fuzz.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
@ -4,7 +4,8 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[graphw00f](https://github.com/dolevf/graphw00f)|GraphQL Server Engine Fingerprinting utility||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[CrackQL](https://github.com/nicholasaleks/CrackQL)|CrackQL is a GraphQL password brute-force and fuzzing utility.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[BatchQL](https://github.com/assetnote/batchql)|GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GraphQLmap](https://github.com/swisskyrepo/GraphQLmap)|GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[graphql-voyager](https://github.com/APIs-guru/graphql-voyager)|🛰️ Represent any GraphQL API as an interactive graph ||[`graphql`](/categorize/tags/graphql.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,5 +4,7 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[httpie](https://github.com/httpie/httpie)|modern, user-friendly command-line HTTP client for the API era||[`http`](/categorize/tags/http.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[Ronin](https://github.com/ronin-rb/ronin)|Ronin is a free and Open Source Ruby toolkit for security research and development.||[`payload`](/categorize/tags/payload.md) [`http`](/categorize/tags/http.md) [`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[hoppscotch](https://github.com/hoppscotch/hoppscotch)|Open source API development ecosystem||[`http`](/categorize/tags/http.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,15 @@
|
|||
|
||||
## Tools for js-analysis
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[jsluice](https://github.com/BishopFox/jsluice)|Extract URLs, paths, secrets, and other interesting bits from JavaScript||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
|
||||
## Tools for json
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[gron](https://github.com/tomnomnom/gron)|Make JSON greppable!||[`json`](/categorize/tags/json.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
@ -4,8 +4,8 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Fuzzer|[c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker)|JWT brute force cracker written in C ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/C.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[jwt-hack](https://github.com/hahwul/jwt-hack)|🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|utils|[owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon)|||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[jaeles](https://github.com/jaeles-project/jaeles)|The Swiss Army knife for automated Web Application Testing ||[`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Go.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,12 +3,13 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md)|[](/categorize/langs/Java.md)|
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The ZAP core project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|The BurpSuite Project||[`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Java.md)|
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[mitmproxy](https://github.com/mitmproxy/mitmproxy)|An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Python.md)|
|
||||
|Proxy|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[Glorp](https://github.com/denandz/glorp)|A CLI-based HTTP intercept and replay proxy||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Go.md)|
|
||||
|Proxy|[Caido](https://caido.io)|A lightweight web security auditing toolkit||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Rust.md)|
|
||||
|Proxy|[EvilProxy](https://github.com/bbtfr/evil-proxy)|A ruby http/https proxy to do EVIL things.||[`mitmproxy`](/categorize/tags/mitmproxy.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Proxy|[Echo Mirage](https://sourceforge.net/projects/echomirage.oldbutgold.p/)|A generic network proxy that uses DLL injection to capture and alter TCP traffic.||[`mitmproxy`](/categorize/tags/mitmproxy.md)||
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,10 @@
|
|||
|
||||
## Tools for nuclei-templates
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[nuclei-templates](https://github.com/projectdiscovery/nuclei-templates)|Community curated list of templates for the nuclei engine to find security vulnerabilities.||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[missing-cve-nuclei-templates](https://github.com/edoardottt/missing-cve-nuclei-templates)|Weekly updated list of missing CVEs in nuclei templates official repository||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[cent](https://github.com/xm1k3/cent)|Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place.||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[nuclei-wordfence-cve](https://github.com/topscoder/nuclei-wordfence-cve)|Every single day new templates are added to this repo based on updates on Wordfence.com||[`nuclei-templates`](/categorize/tags/nuclei-templates.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
@ -4,9 +4,9 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[interactsh](https://github.com/projectdiscovery/interactsh)|An OOB interaction gathering server and client library||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[boast](https://github.com/marcoagner/boast)|The BOAST Outpost for AppSec Testing (v0.1.0)||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[taborator](https://github.com/hackvertor/taborator)|||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Java.md)|
|
||||
|Utils|[dnsobserver](https://github.com/allyomalley/dnsobserver)|A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. ||[`oast`](/categorize/tags/oast.md) [`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[TukTuk](https://github.com/ArturSS7/TukTuk)|Tool for catching and logging different types of requests. ||[`oast`](/categorize/tags/oast.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,10 @@
|
|||
|
||||
## Tools for online
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[DNSDumpster](https://dnsdumpster.com)| Online dns recon & research, find & lookup dns records||[`dns`](/categorize/tags/dns.md) [`online`](/categorize/tags/online.md)||
|
||||
|Utils|[SequenceDiagram](https://sequencediagram.org)|Online tool for creating UML sequence diagrams||[`online`](/categorize/tags/online.md)||
|
||||
|Utils|[Phoenix](https://www.hahwul.com/phoenix/)|hahwul's online tools||[`online`](/categorize/tags/online.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
@ -5,6 +5,7 @@
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[Shodan](https://www.shodan.io/)| World's first search engine for Internet-connected devices||[`osint`](/categorize/tags/osint.md)||
|
||||
|Recon|[sn0int](https://github.com/kpcyrd/sn0int)|Semi-automatic OSINT framework and package manager||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[HostHunter](https://github.com/SpiderLabs/HostHunter)|Recon tool for discovering hostnames using OSINT techniques.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[spiderfoot](https://github.com/smicallef/spiderfoot)|SpiderFoot automates OSINT collection so that you can focus on analysis.||[`osint`](/categorize/tags/osint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Photon](https://github.com/s0md3v/Photon)|Incredibly fast crawler designed for OSINT. ||[`osint`](/categorize/tags/osint.md) [`crawl`](/categorize/tags/crawl.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,11 +3,14 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[ParamSpider](https://github.com/devanshbatham/ParamSpider)|Mining parameters from dark corners of Web Archives ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[reflected-parameters](https://github.com/PortSwigger/reflected-parameters)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[HUNT](https://github.com/bugcrowd/HUNT)|Identifies common parameters vulnerable to certain vulnerability classes||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Kotlin.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[param-miner](https://github.com/PortSwigger/param-miner)|Param Miner||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Java.md)|
|
||||
|Fuzzer|[fuzzparam](https://github.com/0xsapra/fuzzparam)|A fast go based param miner to fuzz possible parameters a URL can have.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Go.md)|
|
||||
|Fuzzer|[ParamPamPam](https://github.com/Bo0oM/ParamPamPam)|This tool for brute discover GET and POST parameters.||[`param`](/categorize/tags/param.md) [`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Python.md)|
|
||||
|Fuzzer|[GAP](https://github.com/xnl-h4ck3r/GAP-Burp-Extension)|This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links to try these parameters on.||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,4 +4,5 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[reverse-shell-generator](https://github.com/0dayCTF/reverse-shell-generator)|Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)||[`payload`](/categorize/tags/payload.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Ronin](https://github.com/ronin-rb/ronin)|Ronin is a free and Open Source Ruby toolkit for security research and development.||[`payload`](/categorize/tags/payload.md) [`http`](/categorize/tags/http.md) [`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,5 +4,6 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Army-Knife|[Metasploit](https://github.com/rapid7/metasploit-framework)|The world’s most used penetration testing framework||[`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[Ronin](https://github.com/ronin-rb/ronin)|Ronin is a free and Open Source Ruby toolkit for security research and development.||[`payload`](/categorize/tags/payload.md) [`http`](/categorize/tags/http.md) [`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Env|[pentest-env](https://github.com/Sliim/pentest-env)|Pentest environment deployer (kali linux + targets) using vagrant and chef.||[`pentest`](/categorize/tags/pentest.md)|[](/categorize/langs/Ruby.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,8 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[RustScan](https://github.com/brandonskerritt/RustScan)|Faster Nmap Scanning with Rust ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[masscan](https://github.com/robertdavidgraham/masscan)|TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|Scanner|[nmap](https://github.com/nmap/nmap)|Nmap - the Network Mapper. Github mirror of official SVN repository. ||[`portscan`](/categorize/tags/portscan.md)|[](/categorize/langs/C.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3Scanner](https://github.com/sa7mon/S3Scanner)|Scan for open AWS S3 buckets and dump the contents ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[AWSBucketDump](https://github.com/jordanpotti/AWSBucketDump)|Security Tool to Look For Interesting Files in S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[S3cret Scanner](https://github.com/Eilonh/s3crets_scanner)|Hunting For Secrets Uploaded To Public S3 Buckets||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[s3reverse](https://github.com/hahwul/s3reverse)|The format of various s3 buckets is convert in one format. for bugbounty and security testing. ||[`s3`](/categorize/tags/s3.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,10 +3,10 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[h2csmuggler](https://github.com/assetnote/h2csmuggler)|HTTP Request Smuggling Detection Tool||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler)|||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler)|websocket-connection-smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[smuggler](https://github.com/defparam/smuggler)|Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3 ||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[DSSS](https://github.com/stamparm/DSSS)|Damn Small SQLi Scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[sqliv](https://github.com/the-robot/sqliv)|massive SQL injection vulnerability scanner||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[ghauri](https://github.com/r0oth3x49/ghauri)|An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja)|Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities.||[`sqli`](/categorize/tags/sqli.md)|[](/categorize/langs/Perl.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,7 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|Scanner|[a2sv](https://github.com/hahwul/a2sv)|Auto Scanning to SSL Vulnerability ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[testssl.sh](https://github.com/drwetter/testssl.sh)|Testing TLS/SSL encryption anywhere on any port ||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[DeepViolet](https://github.com/spoofzu/DeepViolet)|Tool for introspection of SSL\TLS sessions||[`ssl`](/categorize/tags/ssl.md)|[](/categorize/langs/Java.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,6 +3,7 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Fuzzer|[SSRFire](https://github.com/ksharinarayanan/SSRFire)|An automated SSRF finder. Just give the domain name and your server and chill||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[SSRFmap](https://github.com/swisskyrepo/SSRFmap)|Automatic SSRF fuzzer and exploitation tool ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff)|A simple SSRF-testing sheriff written in Go ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Go.md)|
|
||||
|Exploit|[Gopherus](https://github.com/tarunkant/Gopherus)|This tool generates gopher link for exploiting SSRF and gaining RCE in various servers ||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Python.md)|
|
||||
|
|
|
|||
|
|
@ -0,0 +1,7 @@
|
|||
|
||||
## Tools for ssti
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Fuzzer|[SSTImap](https://github.com/vladko312/SSTImap)|Automatic SSTI detection tool with interactive interface||[`ssti`](/categorize/tags/ssti.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
@ -3,20 +3,26 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subfinder](https://github.com/projectdiscovery/subfinder)|Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[CT_subdomains](https://github.com/internetwache/CT_subdomains)|An hourly updated list of subdomains gathered from certificate transparency logs ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[subgen](https://github.com/pry0cc/subgen)|A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[assetfinder](https://github.com/tomnomnom/assetfinder)|Find domains and subdomains related to a given domain ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[findomain](https://github.com/Edu4rdSHL/findomain)|The fastest and cross-platform subdomain enumerator, do not waste your time. ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Rust.md)|
|
||||
|Recon|[SecurityTrails](https://securitytrails.com)| Online dns / subdomain / recon tool||[`subdomains`](/categorize/tags/subdomains.md) [`online`](/categorize/tags/online.md)||
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subs_all](https://github.com/emadshanab/subs_all)|Subdomain Enumeration Wordlist. 8956437 unique words. Updated. ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[shosubgo](https://github.com/incogbyte/shosubgo)|Small tool to Grab subdomains using Shodan api.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[CT_subdomains](https://github.com/internetwache/CT_subdomains)|An hourly updated list of subdomains gathered from certificate transparency logs ||[`subdomains`](/categorize/tags/subdomains.md)||
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Amass](https://github.com/OWASP/Amass)|In-depth Attack Surface Mapping and Asset Discovery ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[dmut](https://github.com/bp0lr/dmut)|A tool to perform permutations, mutations and alteration of subdomains in golang.||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Lepus](https://github.com/gfek/Lepus)|Subdomain finder||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[dsieve](https://github.com/trickest/dsieve)|Filter and enrich a list of subdomains by level||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,8 +3,8 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[SubOver](https://github.com/Ice3man543/SubOver)|A Powerful Subdomain Takeover Tool||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[subzy](https://github.com/LukaSikic/subzy)|Subdomain takeover vulnerability checker||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[Sub404](https://github.com/r3curs1v3-pr0xy/sub404)|A python tool to check subdomain takeover vulnerability||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,17 +3,23 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[noir](https://github.com/hahwul/noir)|♠️ Noir is an attack surface detector form source code.||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Crystal.md)|
|
||||
|Recon|[cc.py](https://github.com/si9int/cc.py)|Extracting URLs of a specific target based on the results of "commoncrawl.org" ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[goverview](https://github.com/j3ssie/goverview)|goverview - Get an overview of the list of URLs||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md) [`url`](/categorize/tags/url.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[subjs](https://github.com/lc/subjs)|Fetches javascript file from a list of URLS or subdomains.||[`url`](/categorize/tags/url.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[waybackurls](https://github.com/tomnomnom/waybackurls)|Fetch all the URLs that the Wayback Machine knows about for a domain ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gauplus](https://github.com/bp0lr/gauplus)|A modified version of gau for personal usage. Support workers, proxies and some extra things.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[apkleaks](https://github.com/dwisiswant0/apkleaks)|Scanning APK file for URIs, endpoints & secrets. ||[`apk`](/categorize/tags/apk.md) [`url`](/categorize/tags/url.md) [`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[urlhunter](https://github.com/utkusen/urlhunter)|a recon tool that allows searching on URLs that are exposed via shortener services||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlgrab](https://github.com/IAmStoxe/urlgrab)|A golang utility to spider through a website searching for additional links. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[urlprobe](https://github.com/1ndianl33t/urlprobe)|Urls status code & content length checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[godeclutter](https://github.com/c3l3si4n/godeclutter)|Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[unfurl](https://github.com/tomnomnom/unfurl)|Pull out bits of URLs provided on stdin ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[fff](https://github.com/tomnomnom/fff)|The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,7 @@
|
|||
|
||||
## Tools for web3
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[Web3 Decoder](https://github.com/nccgroup/web3-decoder)|Burp Extension for Web3||[`web3`](/categorize/tags/web3.md)|[](/categorize/langs/Java.md)|
|
||||
|
||||
|
|
@ -3,6 +3,7 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md)|[](/categorize/langs/CSS.md)|
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. ||[`wordlist`](/categorize/tags/wordlist.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[bruteforce-lists](https://github.com/random-robbie/bruteforce-lists)|Some files for bruteforcing certain things.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|Utils|[Assetnote Wordlists](https://github.com/assetnote/wordlists)|Automated & Manual Wordlists provided by Assetnote||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/CSS.md)|
|
||||
|Utils|[SecLists](https://github.com/danielmiessler/SecLists)|SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place.||[`wordlist`](/categorize/tags/wordlist.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/Txt.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -3,21 +3,27 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[dalfox](https://github.com/hahwul/dalfox)|🌘🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[XSStrike](https://github.com/s0md3v/XSStrike)|Most advanced XSS scanner. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[XSpear](https://github.com/hahwul/XSpear)|Powerfull XSS Scanning and Parameter analysis tool&gem ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Scanner|[findom-xss](https://github.com/dwisiswant0/findom-xss)|A fast DOM based XSS vulnerability scanner with simplicity. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[Chromium-based-XSS-Taint-Tracking](https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)|Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.||[`xss`](/categorize/tags/xss.md)||
|
||||
|Scanner|[xsscrapy](https://github.com/DanMcInerney/xsscrapy)|XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[xsser](https://github.com/epsylon/xsser)|Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[eval_villain](https://github.com/swoops/eval_villain)|A Firefox Web Extension to improve the discovery of DOM XSS.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xss-cheatsheet-data](https://github.com/PortSwigger/xss-cheatsheet-data)|This repository contains all the XSS cheatsheet data to allow contributions from the community. ||[`xss`](/categorize/tags/xss.md)||
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[XSS-Catcher](https://github.com/daxAKAhackerman/XSS-Catcher)|Find blind XSS but why not gather data while you're at it.||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[gxss](https://github.com/rverton/gxss)|Blind XSS service alerting over slack or email||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[jsfuck](https://github.com/aemkei/jsfuck)|Write any JavaScript with 6 Characters||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[blistener](https://github.com/fyxme/blistener)|Blind-XSS listener with payloads||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Go.md)|
|
||||
|Utils|[xless](https://github.com/mazen160/xless)|The Serverless Blind XSS App||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[hbxss](https://github.com/hahwul/hbxss)|Security test tool for Blind XSS||[`xss`](/categorize/tags/xss.md) [`blind-xss`](/categorize/tags/blind-xss.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[ezXSS](https://github.com/ssl/ezXSS)|ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/PHP.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[weaponised-XSS-payloads](https://github.com/hakluke/weaponised-XSS-payloads)|XSS payloads designed to turn alert(1) into P1||[`xss`](/categorize/tags/xss.md) [`documents`](/categorize/tags/documents.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -4,6 +4,7 @@
|
|||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Ruby.md)|
|
||||
|Exploit|[XXExploiter](https://github.com/luisfontes19/xxexploiter)|Tool to help exploit XXE vulnerabilities||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/TypeScript.md)|
|
||||
|Utils|[230-OOB](https://github.com/lc/230-OOB)|An Out-of-Band XXE server for retrieving file contents over FTP.||[`xxe`](/categorize/tags/xxe.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[docem](https://github.com/whitel1st/docem)|Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)||[`xxe`](/categorize/tags/xxe.md) [`xss`](/categorize/tags/xss.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,8 @@
|
|||
|
||||
## Tools for zipbomb
|
||||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Utils|[ZipBomb](https://github.com/abdulfatir/ZipBomb)|A simple implementation of ZipBomb in Python||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|Utils|[zip-bomb](https://github.com/damianrusinek/zip-bomb)|Create a ZIPBomb for a given uncompressed size (flat and nested modes).||[`zipbomb`](/categorize/tags/zipbomb.md)|[](/categorize/langs/Python.md)|
|
||||
|
||||
File diff suppressed because one or more lines are too long
|
Before Width: | Height: | Size: 2.4 MiB After Width: | Height: | Size: 3.2 MiB |
Binary file not shown.
|
After Width: | Height: | Size: 486 B |
Binary file not shown.
|
After Width: | Height: | Size: 895 B |
Binary file not shown.
|
After Width: | Height: | Size: 459 B |
Binary file not shown.
|
After Width: | Height: | Size: 839 B |
Binary file not shown.
|
After Width: | Height: | Size: 761 B |
|
|
@ -164,8 +164,8 @@ weapons.each do | data |
|
|||
lang_badge = ""
|
||||
begin
|
||||
if data['lang'].length > 0 && data['lang'] != "null"
|
||||
langs.push "[`#{data['lang']}`](/categorize/langs/#{data['lang']}.md)"
|
||||
lang_badge = "[![#{data['lang']}](/images/#{data['lang'].downcase}.png)](/categorize/langs/#{data['lang']}.md)"
|
||||
langs.push "[`#{data['lang']}`](/categorize/langs/#{data['lang'].gsub('#','%23')}.md)"
|
||||
lang_badge = "[![#{data['lang']}](/images/#{data['lang'].downcase.gsub('#','%23')}.png)](/categorize/langs/#{data['lang'].gsub('#','%23')}.md)"
|
||||
end
|
||||
rescue
|
||||
end
|
||||
|
|
|
|||
|
|
@ -1 +1 @@
|
|||
Sun Oct 9 07:03:20 UTC 2022
|
||||
Wed Sep 6 15:21:40 UTC 2023
|
||||
|
|
|
|||
|
|
@ -11,3 +11,4 @@ platform:
|
|||
lang: CSS
|
||||
tags:
|
||||
- wordlist
|
||||
- documents
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: BLUTO
|
||||
description: DNS Analysis Tool
|
||||
url: https://github.com/darryllane/Bluto
|
||||
category: tool
|
||||
type: Recon
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags:
|
||||
- dns
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: BaRMIe
|
||||
description: Java RMI enumeration and attack tool.
|
||||
url: https://github.com/NickstaDB/BaRMIe
|
||||
category: tool
|
||||
type: Exploit
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Java
|
||||
tags:
|
||||
- RMI
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: BatchQL
|
||||
description: GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
|
||||
url: https://github.com/assetnote/batchql
|
||||
category: tool
|
||||
type: Fuzzer
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags:
|
||||
- graphql
|
||||
|
|
@ -10,4 +10,5 @@ platform:
|
|||
- windows
|
||||
- burpsuite
|
||||
lang: Python
|
||||
tags: []
|
||||
tags:
|
||||
- js-analysis
|
||||
|
|
|
|||
|
|
@ -12,4 +12,5 @@ platform:
|
|||
lang: Java
|
||||
tags:
|
||||
- mitmproxy
|
||||
- live-audit
|
||||
- live-audit
|
||||
- crawl
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: Clipboard
|
||||
description: An external brain that remembers anything, anytime, anywhere.
|
||||
url: https://github.com/Slackadays/Clipboard
|
||||
category: tool
|
||||
type: Utils
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: C++
|
||||
tags:
|
||||
- clipboard
|
||||
|
|
@ -10,4 +10,5 @@ platform:
|
|||
- windows
|
||||
lang:
|
||||
tags:
|
||||
- dns
|
||||
- dns
|
||||
- online
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
name: Dr. Watson
|
||||
description: Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information
|
||||
url: https://github.com/prodigysml/Dr.-Watson
|
||||
category: tool-addon
|
||||
type: Recon
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
- burpsuite
|
||||
lang: Python
|
||||
tags:
|
||||
- param
|
||||
- subdomains
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: Firefox Multi-Account Containers
|
||||
description: Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs
|
||||
url: https://github.com/mozilla/multi-account-containers
|
||||
category: browser-addon
|
||||
type: Utils
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
- firefox
|
||||
lang: JavaScript
|
||||
tags: []
|
||||
|
|
@ -1,6 +1,6 @@
|
|||
---
|
||||
name: fockcache
|
||||
description: FockCache - Minimalized Test Cache Poisoning
|
||||
name: FockCache
|
||||
description: Minimalized Test Cache Poisoning
|
||||
url: https://github.com/tismayil/fockcache
|
||||
category: tool
|
||||
type: Scanner
|
||||
|
|
@ -9,4 +9,5 @@ platform:
|
|||
- macos
|
||||
- windows
|
||||
lang: Go
|
||||
tags: []
|
||||
tags:
|
||||
- cache-vuln
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
---
|
||||
name: GAP
|
||||
description: This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links to try these parameters on.
|
||||
url: https://github.com/xnl-h4ck3r/GAP-Burp-Extension
|
||||
category: tool-addon
|
||||
type: Fuzzer
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
- burpsuite
|
||||
lang: Python
|
||||
tags:
|
||||
- param
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: GadgetProbe
|
||||
description: Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
|
||||
url: https://github.com/BishopFox/GadgetProbe
|
||||
category: tool
|
||||
type: Utils
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Java
|
||||
tags:
|
||||
- deserialize
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: Glorp
|
||||
description: A CLI-based HTTP intercept and replay proxy
|
||||
url: https://github.com/denandz/glorp
|
||||
category: tool
|
||||
type: Proxy
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Go
|
||||
tags:
|
||||
- mitmproxy
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: HostHunter
|
||||
description: Recon tool for discovering hostnames using OSINT techniques.
|
||||
url: https://github.com/SpiderLabs/HostHunter
|
||||
category: tool
|
||||
type: Recon
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags:
|
||||
- osint
|
||||
|
|
@ -9,4 +9,5 @@ platform:
|
|||
- macos
|
||||
- windows
|
||||
lang: Shell
|
||||
tags: []
|
||||
tags:
|
||||
- js-analysis
|
||||
|
|
|
|||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: Lepus
|
||||
description: Subdomain finder
|
||||
url: https://github.com/gfek/Lepus
|
||||
category: tool
|
||||
type: Recon
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags:
|
||||
- subdomains
|
||||
|
|
@ -9,4 +9,5 @@ platform:
|
|||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags: []
|
||||
tags:
|
||||
- js-analysis
|
||||
|
|
|
|||
|
|
@ -10,5 +10,5 @@ platform:
|
|||
- windows
|
||||
- firefox
|
||||
- chrome
|
||||
lang:
|
||||
lang: JavaScript
|
||||
tags: []
|
||||
|
|
|
|||
|
|
@ -0,0 +1,12 @@
|
|||
---
|
||||
name: Oralyzer
|
||||
description: Open Redirection Analyzer
|
||||
url: https://github.com/r0075h3ll/Oralyzer
|
||||
category: tool
|
||||
type: Scanner
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags: []
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
---
|
||||
name: ParamPamPam
|
||||
description: This tool for brute discover GET and POST parameters.
|
||||
url: https://github.com/Bo0oM/ParamPamPam
|
||||
category: tool
|
||||
type: Fuzzer
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags:
|
||||
- param
|
||||
- cache-vuln
|
||||
|
|
@ -1,12 +1,13 @@
|
|||
---
|
||||
name: Phoenix
|
||||
description: " hahwul's online tools"
|
||||
url: https://www.hahwul.com/p/phoenix.html
|
||||
description: hahwul's online tools
|
||||
url: https://www.hahwul.com/phoenix/
|
||||
category: tool
|
||||
type: Utils
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang:
|
||||
tags: []
|
||||
lang: JavaScript
|
||||
tags:
|
||||
- online
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
---
|
||||
name: PwnFox
|
||||
description: Firefox/Burp extension that provide usefull tools for your security audit.
|
||||
url: https://github.com/yeswehack/PwnFox
|
||||
category: browser-addon
|
||||
type: Utils
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
- firefox
|
||||
- burpsuite
|
||||
lang: JavaScript
|
||||
tags: []
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
name: REcollapse
|
||||
description: REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications
|
||||
url: https://github.com/0xacb/recollapse
|
||||
category: tool
|
||||
type: Utils
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Python
|
||||
tags:
|
||||
- fuzz
|
||||
|
|
@ -0,0 +1,15 @@
|
|||
---
|
||||
name: Ronin
|
||||
description: Ronin is a free and Open Source Ruby toolkit for security research and development.
|
||||
url: https://github.com/ronin-rb/ronin
|
||||
category: tool
|
||||
type: Utils
|
||||
platform:
|
||||
- linux
|
||||
- macos
|
||||
- windows
|
||||
lang: Ruby
|
||||
tags:
|
||||
- payload
|
||||
- http
|
||||
- pentest
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue