S1N6H / BarchaLinks
Barcha is your Swiss‑Army knife for SQL Injection reconnaissance 🔍. Written in Go, it automates: Shodan enumeration of SSL hosts 🕵️♂️ Liveness & redirect checks (ignores bad certs) 🔄 Automated Ghauri tests for each host 🛡️ SQLite logging of every scan 🔖
☆30Updated 9 months ago
Alternatives and similar repositories for Barcha
Users that are interested in Barcha are comparing it to the libraries listed below
Sorting:
- ☆23Updated 10 months ago
- ☆170Updated last month
- CLI tool that fetches resolved & disclosed HackerOne reports by vulnerability and exports them to CSV.☆35Updated 4 months ago
- Prompts for performing tests on your Kali Linux using Gemini-cli, ChatGPT, DeepSeek, CursorAI, Claude Code, and Copilot.☆211Updated last month
- 🤖 LLM-powered agent for automated Google Dorking in bug hunting & pentesting.☆228Updated 2 months ago
- Security testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.☆166Updated last month
- SubCerts is a simple tool that uses certificate transparency logs (via crt.sh) to extract subdomains of a given domain.☆75Updated last month
- Analyze Android native `.so` files☆119Updated 6 months ago
- Tool for automate bug hunting process 🔍 --> 🍭☆47Updated 7 months ago
- Admin Directory Finder is a tool designed to scan and identify directories under admin paths, such as admin/dashboard.php. It helps in se…☆33Updated 5 months ago
- A New Approach to Directory Bruteforce with WaybackLister v1.0☆225Updated 5 months ago
- SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. I…☆163Updated last year
- ☆88Updated 5 months ago
- A comprehensive penetration testing operations dashboard for managing projects, tasks, findings, clients, and assets. Built with Next.js,…☆296Updated last month
- Passive leak enumeration tool.☆266Updated this week
- Scan websites for exposed Supabase JWTs, enumerate accessible tables, and detect sensitive data exposure automatically.☆116Updated last month
- Chrome extension tool for OSINT & Recon☆57Updated last year
- ☆65Updated 2 years ago
- IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applicatio…☆218Updated 4 months ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆192Updated 2 weeks ago
- 📲 Apepe is a project developed to help to capture informations from a Android app through his APK file. It can be used to extract the co…☆141Updated 3 months ago
- automated Open Source Intelligence gathering☆182Updated 2 months ago
- ☆197Updated last week
- NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js☆81Updated 10 months ago
- BeeXSS is a specialized automated tool designed to detect Blind XSS (Cross-Site Scripting) vulnerabilities in web applications.☆37Updated last year
- WebRecon is an advanced Open Source Intelligence (OSINT) web reconnaissance tool designed for cybersecurity professionals, penetration te…☆236Updated 2 weeks ago
- A fast Go-based tool to uncover sensitive information in JavaScript☆37Updated 7 months ago
- ☆109Updated 11 months ago
- API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).☆231Updated 2 weeks ago
- 🪄 XSSDynaGen is a tool designed to analyze URLs with parameters, identify the characters allowed by the server, and generate advanced XS…☆55Updated last year