I made a little recon tool I built this small project to scan for subdomains & hidden directories. It checks both normal style (sub.domain.com) and reversed style (domain.sub.com) and shows only live results. You can also save the results for later use.
☆14Aug 25, 2025Updated last year
Alternatives and similar repositories for NukRecon
Users that are interested in NukRecon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Modular Windows toolkit for Chrome history harvesting & red team demos.☆15Mar 2, 2026Updated 7 months ago
- A lightweight Windows automation tool which works on Windows only that automatically copies selected user folders to a USB drive.☆17Jun 2, 2026Updated 4 months ago
- DeConfigro is a tool that scans WordPress websites for the WordPress Setup Config Vulnerability. If exposed, this page indicates an incom…☆19Mar 9, 2026Updated 7 months ago
- PolyCaptcha is a Flask‑based web application that mimics Google’s image‑based reCAPTCHA flow to demonstrate how attackers can use visual …☆11Jul 24, 2025Updated last year
- ICU-WP is a Flask-based WordPress username enumeration tool. It detects WordPress sites and uses methods like author URL checks, REST API…☆16Jan 17, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This GitHub Pages site serves as a creative demonstration of website defacement, featuring an engaging interface and audio elements. IT i…☆13Sep 25, 2024Updated 2 years ago
- ScriptoX is a versatile tool that enables users to create SVG and PDF files with embedded JavaScript code.☆20Oct 17, 2024Updated 2 years ago
- XSSGAI is the first-ever AI-powered XSS (Cross-Site Scripting) payload generator. It leverages machine learning and deep learning to crea…☆44Feb 4, 2026Updated 8 months ago
- AKQ_0D_PE is a lightweight and powerful Zero-day local privilege escalation exploit targeting a critical vulnerability in the Linux PipeF…☆13Apr 18, 2025Updated last year
- ShoDam is a simple and effective bookmarklet designed to extract IP addresses from Shodan search results with a single click.☆21Nov 13, 2024Updated last year
- TorrentSpyder is a command-line utility designed to retrieve Torrent Download History based on a specified IP address.☆21Oct 19, 2024Updated 2 years ago
- NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js☆92Apr 12, 2025Updated last year
- CoupDeWeb is an automated web vulnerability scanner designed for security researchers and developers. It scans for potential vulnerable …☆34Oct 17, 2024Updated 2 years ago
- GitIntel is a robust GitHub OSINT tool crafted to reveal concealed insights from GitHub repositories and user profiles. Its capabilities …☆19Jan 29, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- TimeVault is a specialized automated tool designed to detect potential information disclosure vulnerabilities in web applications by leve…☆43Jan 29, 2025Updated last year
- BeeXSS is a specialized automated tool designed to detect Blind XSS (Cross-Site Scripting) vulnerabilities in web applications.☆39Dec 3, 2024Updated last year
- Xploitra is a powerful reverse shell payload generator for educational and security testing. It offers customizable payloads with advance…☆74Oct 17, 2024Updated 2 years ago
- I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrat…☆84Oct 17, 2024Updated 2 years ago
- Shellcoder.py - simple script to automate shellcoding process and shellcode testing.☆13Jul 23, 2024Updated 2 years ago
- Injectra is a Python-based tool for injecting custom payloads into various file types using their magic numbers. It supports file types l…☆150Jan 12, 2025Updated last year
- QNAP N-Day (Probably not CVE-2020-2509)☆14Jul 27, 2022Updated 4 years ago
- ☆20Oct 24, 2023Updated 3 years ago
- A high-accuracy, behavioral cache poisoning scanner for modern Web APIs☆13Dec 10, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Algopwn is an interactive Python tool for security researchers and bug-bounty hunters to audit Algolia API keys. It detects ACLs, disting…☆11Nov 6, 2025Updated 11 months ago
- Fast IP Lookups for Open Ports and Vulnerabilities from API internetdb shodan☆30Feb 3, 2022Updated 4 years ago
- Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self…☆18Jun 23, 2026Updated 4 months ago
- Example of using Windows Platform Binary Table (WPBT)☆27Jul 9, 2023Updated 3 years ago
- Fast WEB CRAWLER with REGEX search support for precise, in-scope data extraction☆14Sep 19, 2025Updated last year
- Plugin for Profanity to to enable Android notifications on Termux☆21Feb 27, 2017Updated 9 years ago
- 🚀 Advanced XSS Scanner Tool with WAF Detection & Browser Verification | 80+ Payloads | Multi-threaded | Professional Reporting☆13Jul 5, 2025Updated last year
- Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator☆21Jan 7, 2026Updated 9 months ago
- Tool to dump EFI runtime drivers.☆37Feb 23, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)☆18Dec 12, 2025Updated 10 months ago
- API URL fuzzer that cross-joins hosts and paths into normalized URLs, probes them over HTTP, and reports responding endpoints.☆30Jun 11, 2026Updated 4 months ago
- Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection☆22Sep 15, 2024Updated 2 years ago
- my try at recreating and exploiting some v8 CVEs☆22Oct 3, 2025Updated last year
- Get URLs from the Wayback Machine. Able to handle large outputs.☆35Sep 15, 2023Updated 3 years ago
- Scans WordPress sites to find unclaimed plugin slugs on the public directory.☆27Oct 12, 2025Updated last year