UnaPibaGeek / ctfr

Related projects ⓘ

Alternatives and complementary repositories for ctfr

• almandin / fuxploider
  File upload vulnerability scanner and exploitation tool.
  ☆3,043Updated last year
• infosec-au / altdns
  Generates permutations, alterations and mutations of subdomains and then resolves them
  ☆2,328Updated 6 months ago
• michenriksen / aquatone
  A Tool for Domain Flyovers
  ☆5,639Updated 2 years ago
• vulnersCom / getsploit
  Command line utility for searching and downloading exploits
  ☆1,725Updated 5 months ago
• blechschmidt / massdns
  A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
  ☆3,164Updated 7 months ago
• darkoperator / dnsrecon
  DNS Enumeration Script
  ☆2,635Updated this week
• jonluca / Anubis
  Subdomain enumeration and information gathering tool
  ☆1,199Updated 2 weeks ago
• haccer / subjack
  Subdomain Takeover tool written in Go
  ☆1,909Updated last year
• bugcrowd / HUNT
  ☆2,180Updated 11 months ago
• s0md3v / Striker
  Striker is an offensive information and vulnerability scanner.
  ☆2,229Updated last year
• s0md3v / Arjun
  HTTP parameter discovery suite.
  ☆5,246Updated this week
• RedSiege / EyeWitness
  EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
  ☆4,979Updated 2 weeks ago
• TheRook / subbrute
  A DNS meta-query spider that enumerates DNS records, and subdomains.
  ☆3,358Updated 2 years ago
• GerbenJavado / LinkFinder
  A python script that finds endpoints in JavaScript files
  ☆3,717Updated 6 months ago
• mandatoryprogrammer / xsshunter
  The XSS Hunter service - a portable version of XSSHunter.com
  ☆1,489Updated last year
• guelfoweb / knock
  Knock Subdomain Scan
  ☆3,876Updated 3 months ago
• maK- / parameth
  This tool can be used to brute discover GET and POST parameters
  ☆1,341Updated 5 years ago
• Findomain / Findomain
  The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, su…
  ☆3,311Updated 8 months ago
• mschwager / fierce
  A DNS reconnaissance tool for locating non-contiguous IP space.
  ☆1,611Updated 2 months ago
• evilsocket / xray
  XRay is a tool for recon, mapping and OSINT gathering from public networks.
  ☆2,203Updated 3 months ago
• BishopFox / GitGot
  Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
  ☆1,451Updated 8 months ago
• ztgrace / changeme
  A default credential scanner.
  ☆1,444Updated 2 years ago
• sa7mon / S3Scanner
  Scan for misconfigured S3 buckets across S3-compatible APIs!
  ☆2,559Updated this week
• s0md3v / Decodify
  Detect and decode encoded strings, recursively.
  ☆872Updated last year
• Viralmaniar / Passhunt
  Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors…
  ☆1,187Updated 5 years ago
• 1N3 / IntruderPayloads
  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…
  ☆3,681Updated 3 years ago
• x90skysn3k / brutespray
  Bruteforcing from various scanner output - Automatically attempts default creds on found services.
  ☆2,035Updated this week
• snoopysecurity / awesome-burp-extensions
  A curated list of amazingly awesome Burp Extensions
  ☆2,988Updated 3 weeks ago
• Nekmo / dirhunt
  Find web directories without bruteforce
  ☆1,764Updated last year