Blazing fast GraphQL discovery & fingerprinting toolbox.
☆132Nov 21, 2023Updated 2 years ago
Alternatives and similar repositories for goctopus
Users that are interested in goctopus are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.☆474Oct 3, 2023Updated 2 years ago
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆228May 22, 2023Updated 3 years ago
- 🔒 A free, open-source platform dedicated to understand and secure GraphQL applications — all directly in your browser!☆65Oct 30, 2024Updated last year
- Hourly Updated (Merged & Filtered) List of Torrent Trackers [Maintainer=@Azathothas]☆18Updated this week
- Script to read input from stdin and encode it☆19Aug 23, 2023Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Automate Nuclei scans and streamline bug hunting workflows☆21Feb 16, 2024Updated 2 years ago
- 🦜 The modern changelog generator.☆20Jun 4, 2026Updated last week
- Burp Suite extension that offers a toolkit for testing GraphQL endpoints.☆204Aug 5, 2024Updated last year
- Obtain GraphQL API schema even if the introspection is disabled☆1,474Dec 5, 2025Updated 6 months ago
- A pre-commit tool designed for monorepos. Successor of Mookme.☆22Jun 16, 2025Updated 11 months ago
- 🔗 A curated list of awesome Caido related projects☆50Mar 25, 2025Updated last year
- A curated list of awesome GraphQL Security frameworks, libraries, software and resources☆395May 5, 2026Updated last month
- Moved to https://github.com/pkgforge/soarpkgs☆22Jan 10, 2025Updated last year
- A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows☆301Sep 8, 2023Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- [Automated | UpToDate] Daily Dumps of CertStream Subdomains Data For the World 🌐☆16Feb 15, 2025Updated last year
- graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…☆853May 16, 2026Updated 3 weeks ago
- Security Auditor Utility for GraphQL APIs☆652Nov 20, 2025Updated 6 months ago
- Utilities for linting and building SBUILD packages [maintainer=@QaidVoid]☆25Jun 7, 2026Updated last week
- A GraphQL enumeration and extraction tool☆134Jan 29, 2023Updated 3 years ago
- AbsintheSecurity provides utilities to improve the security posture of APIs built with Absinthe GraphQL.☆17Dec 11, 2023Updated 2 years ago
- This page should help you with the recon for security issues.☆20Oct 14, 2022Updated 3 years ago
- Filter and enrich a list of subdomains by level☆212Sep 25, 2023Updated 2 years ago
- ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.☆115Jan 4, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Nomi enable people to use computer more simply.☆79Mar 3, 2025Updated last year
- Linux Distro (Alma | Alpine | Arch | Amazon | Clear | Debian | Fedora | Gentoo | Kali | OpenSuSe | Oracle | Rocky | Ubuntu) images (.tar…☆18Nov 7, 2024Updated last year
- The Primate Pack is a suite of extensions for Caido.☆14Sep 29, 2024Updated last year
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆280Sep 11, 2025Updated 9 months ago
- ☆26Mar 5, 2023Updated 3 years ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆754Dec 19, 2023Updated 2 years ago
- ☆212Jul 11, 2024Updated last year
- 📦 The Largest Collection of Pre-Compiled Linux Static Binaries for Soar: The Modern, Bloat-Free Distro-Independent Package Manager☆31Dec 19, 2025Updated 5 months ago
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.☆1,327Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Jan 2, 2025Updated last year
- WebSocket REPL for pentesters☆236Jul 24, 2024Updated last year
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆180Dec 22, 2025Updated 5 months ago
- 🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.☆434Apr 10, 2026Updated 2 months ago
- Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.☆244Jun 3, 2026Updated last week
- Manage attack surface data on Elasticsearch☆26Nov 20, 2023Updated 2 years ago
- Tool to hack Graphql☆15Oct 17, 2023Updated 2 years ago