Alternatives and similar repositories for amass-tools:

Users that are interested in amass-tools are comparing it to the libraries listed below

• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆84Updated 2 years ago
• dwisiswant0 / unew
  A tool for append URLs, skipping duplicates/paths & combine parameters.
  ☆120Updated 2 years ago
• Sambal0x / Recon-tools
  Some of my bug bounty tools
  ☆48Updated 5 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 3 years ago
• codingo / microsubs
  A collection of code for interacting with API sources directly to improve your understanding of those services.
  ☆66Updated 4 years ago
• Rhynorater / reports
  ☆59Updated 7 months ago
• dwisiswant0 / wadl-dumper
  Dump all available paths and/or endpoints on WADL file.
  ☆90Updated this week
• BugBountyResources / targets
  A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bul…
  ☆98Updated 3 years ago
• dwisiswant0 / hinject
  Host Header Injection Checker
  ☆80Updated 2 years ago
• pry0cc / subgen
  A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!
  ☆83Updated 4 years ago
• tomnomnom / burl
  A Broken-URL Checker
  ☆79Updated 7 years ago
• sw33tLie / bcscope
  Get the scope of your bugcrowd programs
  ☆66Updated 4 years ago
• Abss0x7tbh / bass
  Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …
  ☆143Updated 10 months ago
• allyomalley / BurpParamFlagger
  A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…
  ☆130Updated 4 years ago
• ptswarm / ptswarm-twitter
  ☆76Updated 4 years ago
• devanshbatham / awesome-bughunting-oneliners
  A list of Awesome Bughunting oneliners , collected from the various sources
  ☆64Updated last year
• Healdb / Elevate
  Horizontal Domain Discovery
  ☆75Updated last year
• dwisiswant0 / bounty-targets-alert
  It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
  ☆56Updated 2 years ago
• samirettali / dumpcn
  Get all the CNs from a list of domains
  ☆46Updated 3 years ago
• Zarcolio / wwwordlist
  Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quo…
  ☆101Updated last year
• 1ndianl33t / 1ndiList
  Recon Custom WordList Ganerator
  ☆56Updated 4 years ago
• daehee / mildew
  Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs
  ☆96Updated 4 years ago
• Droidzzzio / EnumerationList
  This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path
  ☆103Updated 4 years ago
• dariusztytko / vhosts-sieve
  Searching for virtual hosts among non-resolvable domains
  ☆87Updated 4 years ago
• 0xrishabh / websy
  Keep track of changes in website with WEBSY
  ☆36Updated last year
• In3tinct / Taken
  Takeover AWS ips and have a working POC for Subdomain Takeover.
  ☆90Updated 10 months ago
• tdr130 / assetnote
  Push notifications for passive DNS data
  ☆107Updated 8 years ago
• smiegles / extract-relative-url-heapsnapshot
  Extract relative urls from a heap snapshot
  ☆85Updated 3 years ago
• junnlikestea / vita
  A tool to find subdomains or domains from passive sources.
  ☆110Updated 4 years ago
• assetnote / h2csmuggler
  ☆71Updated last year