Alternatives and similar repositories for dom-red

Users that are interested in dom-red are comparing it to the libraries listed below

• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆48Updated 2 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 3 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• ghostlulzhacks / s3brute
  s3 brute force tool
  ☆44Updated 4 years ago
• AdmiralGaust / bountyReconV2
  Framework to automate Bug Bounty Reconnaissance
  ☆44Updated 4 years ago
• 1ndianl33t / 1ndiList
  Recon Custom WordList Ganerator
  ☆58Updated 5 years ago
• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆38Updated 4 years ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆48Updated 2 years ago
• AlfredBerg / dnsline
  Tool for making it easy to collect dns results from the CLI
  ☆40Updated 11 months ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆52Updated last year
• Sicks3c / Reconizer
  ☆38Updated 4 years ago
• iamthefrogy / bucketbunny
  AWS S3 open bucket poc automated script.
  ☆57Updated 3 years ago
• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆85Updated 2 years ago
• xElkomy / Workflow-Bug-Bounty
  My Tools For Bug Bounty
  ☆66Updated 9 months ago
• gwen001 / bxss
  Alternative to XSS Hunter for blind XSS.
  ☆51Updated 2 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 4 years ago
• defparam / h1stats
  a tool that compiles a csv of all h1 program stats
  ☆47Updated 2 years ago
• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆92Updated last week
• six2dez / degoogle_hunter
  Simple fork from degoogle original project with bug hunting purposes
  ☆89Updated 3 years ago
• XalfiE / Bug-Bounty-Oneliners
  Oneliners curated from my experience and from the internet
  ☆22Updated 4 years ago
• vikrantbatra05 / HuntTheBug
  Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…
  ☆55Updated 3 years ago
• devpwn / xmlrpc-scan
  golang tool to scan domains or single domains with know security issues against xmlrpc
  ☆62Updated last year
• abuvanth / kicks3
  S3 bucket finder from html,js and bucket misconfiguration testing tool
  ☆34Updated 5 years ago
• hakluke / hakfindinternaldomains
  Feed it a list of subdomains, it will resolve them and tell you which ones are internal
  ☆92Updated 3 years ago
• bonino97 / LemonBooster-v2
  Reestructured LemonBooster.
  ☆47Updated 11 months ago
• emadshanab / Scan-Apple-ASN-for-vulnerabilities-and-leave-no-port
  ☆44Updated 3 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆22Updated 2 years ago
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 4 years ago
• dwisiswant0 / bounty-targets-alert
  It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
  ☆58Updated 3 years ago
• dwisiswant0 / continuous-nuclei
  Running nuclei Continuously
  ☆56Updated 2 years ago