A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
☆394Apr 17, 2020Updated 6 years ago
Alternatives and similar repositories for chomp-scan
Users that are interested in chomp-scan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An automated approach to performing recon for bug bounty hunting and penetration testing.☆453Jul 21, 2020Updated 6 years ago
- Trying to make automated recon for bug bounties☆254May 3, 2021Updated 5 years ago
- Simple shell script for automated domain recognition with some tools☆305Nov 11, 2020Updated 5 years ago
- Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.☆290Nov 30, 2019Updated 6 years ago
- Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed b…☆1,035Feb 5, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A highly configurable Framework for easy automated web scanning☆385Jul 13, 2020Updated 6 years ago
- Multi Tool Subdomain Enumeration☆721Apr 11, 2021Updated 5 years ago
- Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts a…☆366Jul 23, 2022Updated 4 years ago
- Multiprocessing(Parallel)Subdomain Detect Script☆327Jan 28, 2024Updated 2 years ago
- Pentest/BugBounty progress control with scanning modules☆279Jul 16, 2020Updated 6 years ago
- An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.☆400Mar 24, 2021Updated 5 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- A powerful target reconnaissance framework powered by graph theory.☆421Oct 21, 2022Updated 4 years ago
- You can read the writeup on this script here☆271Jul 12, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,818Apr 26, 2024Updated 2 years ago
- Recursive DNS Subdomain Enumerator with dead-end avoidance system (BETA)☆146Apr 9, 2021Updated 5 years ago
- The project contains multiple shell scripts for automating the tasks during recon.☆175Aug 21, 2023Updated 3 years ago
- A better version of my xssfinder tool - scans for different types of xss on a list of urls.☆188Aug 3, 2019Updated 7 years ago
- rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments☆250Oct 15, 2019Updated 7 years ago
- Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna c…☆287Oct 14, 2021Updated 5 years ago
- Bugbounty scope tool☆331Mar 5, 2025Updated last year
- You can read the writeup on this script here☆190May 9, 2026Updated 5 months ago
- A tool to link a domain with registered organisation names and emails, to other domains.☆845May 16, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆117Mar 29, 2019Updated 7 years ago
- My Recon Automation☆191May 28, 2021Updated 5 years ago
- An hourly updated list of subdomains gathered from certificate transparency logs☆349Oct 13, 2021Updated 5 years ago
- ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.☆726May 6, 2022Updated 4 years ago
- Poor (rich?) man's bug bounty pipeline https://dubell.io☆290Apr 24, 2023Updated 3 years ago
- A Tool for Domain Flyovers☆5,956May 22, 2022Updated 4 years ago
- Generates permutations, alterations and mutations of subdomains and then resolves them☆2,511Jan 9, 2025Updated last year
- Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]☆305Oct 14, 2018Updated 8 years ago
- ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight☆219Apr 10, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- DNS Takeover tool written in Go☆2,127Oct 21, 2026Updated last week
- A tool for performing an initial information-gathering scan of websites for penetration tests.☆24Aug 27, 2019Updated 7 years ago
- Scan secrets from Continuous Integration Build Logs☆53Oct 14, 2019Updated 7 years ago
- Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …☆223Dec 7, 2022Updated 3 years ago
- Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and l…☆541Apr 14, 2021Updated 5 years ago
- Take a list of domains/subdomains and probe for working http/https server.☆193Sep 8, 2020Updated 6 years ago
- Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will m…☆100Dec 30, 2019Updated 6 years ago