CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
☆375Feb 4, 2024Updated 2 years ago
Alternatives and similar repositories for cloudbunny
Users that are interested in cloudbunny are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- IP lookup by favicon using Shodan☆1,206Feb 5, 2025Updated last year
- Burp Suite extension to discover assets from HTTP response.☆235Jan 22, 2025Updated last year
- XXRF Shots - Useful for testing SSRF vulnerability☆74Feb 18, 2023Updated 3 years ago
- String or worldlist encoder for use in fuzzing or web application testing☆19Sep 2, 2019Updated 7 years ago
- Encoded Reverse Shell Generator With Techniques To Bypass AV's☆144Aug 12, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed b…☆1,034Feb 5, 2021Updated 5 years ago
- This tool can be used to brute discover GET and POST parameters☆1,395Aug 24, 2019Updated 7 years ago
- A simple SSRF-testing sheriff written in Go☆343Oct 31, 2024Updated last year
- ☆10Oct 30, 2019Updated 6 years ago
- ☆18Sep 22, 2018Updated 8 years ago
- Collection of Scripts for shodan searching stuff.☆1,156Jan 14, 2026Updated 9 months ago
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- A weaponized version of CVE-2018-9206☆62Oct 30, 2018Updated 7 years ago
- a .js scanner, built in php. designed to scrape urls and other info☆227Aug 22, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any yea…☆79Mar 8, 2018Updated 8 years ago
- network reconnaissance toolkit☆437Dec 17, 2018Updated 7 years ago
- ☆126Sep 2, 2019Updated 7 years ago
- A python script that finds endpoints in JavaScript files☆4,465Apr 13, 2024Updated 2 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,814Apr 26, 2024Updated 2 years ago
- Takes ip range, Scan all open SSL Certs, Grab Cnames☆110Sep 23, 2018Updated 8 years ago
- A highly configurable Framework for easy automated web scanning☆383Jul 13, 2020Updated 6 years ago
- yet another dirbuster☆18Jan 14, 2021Updated 5 years ago
- Interactive Post Exploitation Tool☆37Oct 1, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆201Jun 6, 2019Updated 7 years ago
- Broken Link Hijacking Burp Extension☆59Sep 13, 2019Updated 7 years ago
- "PRinter Exploitation Toolkit" LAN automation tool☆217Oct 7, 2019Updated 7 years ago
- Retrive the status codes from a list of URLs☆33May 18, 2020Updated 6 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆342Aug 23, 2019Updated 7 years ago
- Auto Recon Bash Script☆31Dec 31, 2024Updated last year
- ☆31Apr 6, 2021Updated 5 years ago
- Goca Scanner☆330Oct 11, 2023Updated 3 years ago
- Detect and bypass web application firewalls and protection systems☆2,932Aug 11, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆536Mar 7, 2022Updated 4 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆100Jul 29, 2019Updated 7 years ago
- An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.☆400Mar 24, 2021Updated 5 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,511Oct 12, 2024Updated 2 years ago
- Recursive DNS Subdomain Enumerator with dead-end avoidance system (BETA)☆146Apr 9, 2021Updated 5 years ago
- Extracting URLs of a specific target based on the results of "commoncrawl.org"☆277Dec 4, 2025Updated 10 months ago
- A small tool that extracts relative URLs from a file.☆768Sep 23, 2020Updated 6 years ago