Alternatives and similar repositories for Recon

Users that are interested in Recon are comparing it to the libraries listed below

• 1hack0 / bug-bounty-101
  Happy Hunting
  ☆138Updated 6 years ago
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆75Updated 4 years ago
• p3n73st3r / Ghazi
  Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…
  ☆107Updated 6 years ago
• Lopseg / Jsdir
  Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
  ☆120Updated 5 years ago
• jas502n / SpringBootVulExploit
  SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist
  ☆29Updated 5 years ago
• m6a-UdS / ssrf-lab
  Lab for exploring SSRF vulnerabilities
  ☆248Updated 4 years ago
• jas502n / cve-2019-2618
  Weblogic Upload Vuln(Need username password)-CVE-2019-2618
  ☆173Updated 6 years ago
• zer0yu / Berserker
  A list of useful payloads for Web Application Security and Pentest/CTF
  ☆307Updated last year
• gh0stkey / JSONandHTTPP
  Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
  ☆103Updated 4 years ago
• CHYbeta / WAF-Bypass
  WAF Bypass Cheatsheet
  ☆214Updated 8 years ago
• paralax / xss-labs
  small set of scripts to practice exploit XSS and CSRF vulnerabilities
  ☆64Updated 7 years ago
• hktalent / CVE-2020-2551
  how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP
  ☆212Updated 2 years ago
• PortSwigger / authz
  ☆108Updated 8 years ago
• veracode-research / actuator-testbed
  A vulnerable application exposing Spring Boot Actuators
  ☆123Updated 6 years ago
• mpgn / Spring-Boot-Actuator-Exploit
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆323Updated 5 years ago
• artsploit / SecLists
  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …
  ☆142Updated 6 years ago
• momika233 / Joomla-3.4.6-RCE
  Joomla 3.4.6 – Remote Code Execution
  ☆108Updated last year
• jas502n / CNVD-C-2019-48814
  WebLogic wls9-async反序列化远程命令执行漏洞
  ☆242Updated 6 years ago
• rabbitmask / WeblogicScanLot
  WeblogicScanLot系列，Weblogic漏洞批量检测工具，V2.2
  ☆185Updated 5 years ago
• ZephrFish / XSSPayloads
  Cross Site Scripting Payloads -- Variations
  ☆72Updated 7 months ago
• coco413 / DiscoverSubdomain
  前渗透信息探测工具集-子域名
  ☆137Updated 7 years ago
• xawdxawdx / sentrySSRF
  Tool to searching sentry config on page or in javascript files and check blind SSRF
  ☆71Updated last year
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆519Updated 5 years ago
• sdsecurity / pooltest
  网上收集的一些利用工具
  ☆18Updated 2 years ago
• NytroRST / XSSFuzzer
  XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
  ☆140Updated 6 years ago
• masahiro331 / CVE-2020-9484
  ☆127Updated 4 years ago
• bigsizeme / burplugin-java-rce
  ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-01…
  ☆108Updated 8 years ago
• StefanMichielse / generate_xxe_payloads
  This tool is just after the first refactoring pushed. Original is from Will Vandevanter (BuffaloWill). Only rearrange the code which will…
  ☆32Updated 9 years ago
• mark-zh / BugBountyTips
  记录一些国外漏洞赏金猎人的挖洞技巧和一些有意思的东西
  ☆39Updated 6 years ago
• Ridter / get_ip_by_ico
  从shodan获取使用了相同favicon.ico的网站
  ☆191Updated 6 years ago