This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.
☆229May 20, 2025Updated 10 months ago
Alternatives and similar repositories for back-me-up
Users that are interested in back-me-up are comparing it to the libraries listed below
Sorting:
- ☆185Mar 14, 2026Updated last week
- In this repo, I have created a subdomain enumeration function that grab subdomains in deep.☆23Mar 19, 2023Updated 3 years ago
- Url scrapper or extractor from alienvault☆38Mar 1, 2025Updated last year
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,580Jun 6, 2022Updated 3 years ago
- ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)☆951May 21, 2025Updated 10 months ago
- ☆29Dec 13, 2023Updated 2 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆374Jul 25, 2023Updated 2 years ago
- output burp body only and auto pretiffy☆20May 1, 2025Updated 10 months ago
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆936Aug 24, 2023Updated 2 years ago
- SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty☆740Jan 25, 2026Updated last month
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆92Jan 11, 2025Updated last year
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,826Aug 20, 2025Updated 7 months ago
- SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.☆38Mar 7, 2021Updated 5 years ago
- JsValidator is a tool created for validating the JS files after crawlling it from waybackurls☆20Mar 13, 2023Updated 3 years ago
- Custom nuclei templates for bug hunting.....☆26May 30, 2024Updated last year
- Prototype Pollution Scanner☆139Apr 11, 2021Updated 4 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,039Aug 23, 2025Updated 6 months ago
- ☆12Jan 4, 2022Updated 4 years ago
- Secret and/or credential patterns used for gf.☆243Feb 10, 2023Updated 3 years ago
- A Burp Extension that makes it easier to view all script code on a Response.☆17Nov 12, 2023Updated 2 years ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,503Jan 8, 2026Updated 2 months ago
- Automated tool for domains & subdomains gathering☆191Jan 30, 2026Updated last month
- MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilitie…☆1,035Jul 23, 2024Updated last year
- ☆139Nov 9, 2024Updated last year
- De-clutter a list of URLs☆385Mar 8, 2026Updated last week
- Scrape domain names from SSL certificates of arbitrary hosts☆689Mar 31, 2024Updated last year
- A collection of awesome one-liner scripts especially for bug bounty tips.☆3,084Jul 29, 2024Updated last year
- This Repositories contains list of One Liners with Descriptions and Installation requirements☆502Jun 28, 2025Updated 8 months ago
- My Priv8 Nuclei Templates☆340May 12, 2024Updated last year
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,568Mar 8, 2026Updated last week
- A Simple Tool to Pull Paid Bounty Scopes for Wide Recon Actvities☆106Feb 22, 2021Updated 5 years ago
- A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it us…☆62Oct 25, 2020Updated 5 years ago
- AI-powered ffuf wrapper☆651Dec 4, 2025Updated 3 months ago
- i will upload more templates here to share with the comunity.☆569Apr 17, 2024Updated last year
- Helios: Automated XSS Testing☆158Aug 3, 2024Updated last year
- All known and unknown public POC's for wordpress themes and plugins☆79Jun 23, 2021Updated 4 years ago
- Never forget where you inject.☆299Aug 15, 2025Updated 7 months ago
- ☆15Feb 6, 2025Updated last year
- Discover new target domains using Content Security Policy☆508Feb 7, 2026Updated last month