PentestPad / subzyLinks
Subdomain takeover vulnerability checker
☆1,509Updated last year
Alternatives and similar repositories for subzy
Users that are interested in subzy are comparing it to the libraries listed below
Sorting:
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,396Updated last year
- Automation for javascript recon in bug bounty.☆1,066Updated 2 years ago
- declutters url lists for crawling/pentesting☆1,522Updated 11 months ago
- Making Favicon.ico based Recon Great again !☆1,260Updated 2 years ago
- A tool for adding new lines to files, skipping duplicates☆1,605Updated 2 years ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,495Updated 3 weeks ago
- Go client to communicate with Chaos DB API.☆815Updated last week
- Accept URLs on stdin, replace all query string values with a user-supplied value☆864Updated 3 years ago
- MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering…☆1,585Updated last week
- A fast tool to scan CRLF vulnerability written in Go☆1,516Updated 2 weeks ago
- A tool to fastly get all javascript sources/files☆855Updated 7 months ago
- Community curated list of public bug bounty and responsible disclosure programs.☆1,280Updated last month
- A fuzzer for detecting open redirect vulnerabilities☆781Updated last year
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆1,044Updated last year
- A wrapper around grep, to help you grep for things☆2,072Updated last year
- Open Redirection Analyzer☆811Updated 2 years ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆2,989Updated last year
- XSS payloads designed to turn alert(1) into P1☆1,388Updated 2 years ago
- A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.☆918Updated 2 months ago
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects☆971Updated 4 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,880Updated last year
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned ent…☆2,106Updated last year
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆1,019Updated last year
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆2,058Updated 2 years ago
- Fetches javascript file from a list of URLS or subdomains.☆829Updated 6 months ago
- MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilitie…☆1,022Updated last year
- Automated & Manual Wordlists provided by Assetnote☆1,602Updated 2 weeks ago
- ☆1,116Updated last month
- Fetch many paths for many hosts - without killing the hosts☆1,689Updated 2 years ago
- Small tool to Grab subdomains using Shodan api.☆529Updated 5 months ago