A GitHub recon/monitoring tool for finding internal leaks belonging to your organisation.
☆94Jan 7, 2024Updated 2 years ago
Alternatives and similar repositories for vinifera
Users that are interested in vinifera are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This automation protect against subdomain takeover on AWS env which also send alerts on slack.☆11Aug 1, 2021Updated 4 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆158Nov 24, 2023Updated 2 years ago
- Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for m…☆13Feb 1, 2022Updated 4 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆94Jul 9, 2025Updated last year
- NodeJS script to extract assets for the Apple bug bounty program from their security acknowledgments page for bug bounty recon.☆79Nov 5, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A simple tool which makes creating nuclei templates even easier.☆37Jun 23, 2024Updated 2 years ago
- Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)☆85Apr 5, 2021Updated 5 years ago
- My Custom made Nuceli-Templates☆22Aug 5, 2025Updated 11 months ago
- Prototype pollution scanner using headless chrome☆217Jul 27, 2022Updated 3 years ago
- A collection of scripts for bug-bounty related stuff☆39Sep 4, 2020Updated 5 years ago
- nxdomain subdomain enumeration☆10Jul 17, 2022Updated 4 years ago
- winafl with mopt mutators and afl fast power schedulers.☆22Feb 2, 2025Updated last year
- Pulse SSL VPN Arbitrary File Read burp extension☆25Sep 24, 2019Updated 6 years ago
- Collection of snippets for devtools.☆13Mar 17, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Go scripts for checking API key / access token validity☆222Aug 3, 2021Updated 4 years ago
- CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.☆135Sep 25, 2019Updated 6 years ago
- Burp Extension for copying requests safely. It redacts headers like Cookie, Authorization and X-CSRF-Token for now. More support can be a…☆19May 17, 2020Updated 6 years ago
- Urls de-duplication tool for better recon.☆145Apr 13, 2026Updated 3 months ago
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Nov 18, 2019Updated 6 years ago
- grapX will iterate through the URLs and grep the endpoints with all possible extensions.☆55Mar 23, 2021Updated 5 years ago
- Bug Bounty tool to automate the recon process.☆12Oct 4, 2023Updated 2 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 4 years ago
- S2-061 CVE-2020-17530☆29Dec 22, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Nuclei Templates - Here you will find the templates I use while hunting☆120Sep 27, 2021Updated 4 years ago
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 7 years ago
- ☆27Jul 30, 2021Updated 4 years ago
- Go tool to perform DNS rebinding☆23Nov 1, 2018Updated 7 years ago
- Weaponizing Live CT logs for automated monitoring of assets☆135Sep 12, 2021Updated 4 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Jul 30, 2022Updated 3 years ago
- Burp Suite extension to easily export sub domains☆45Nov 29, 2019Updated 6 years ago
- Adobe Experience Manager Vulnerability Scanner☆188May 22, 2023Updated 3 years ago
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Nov 10, 2025Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Some helpful Helm Charts for pentesters☆38Jan 28, 2019Updated 7 years ago
- Google Maps API checker☆83Feb 26, 2026Updated 4 months ago
- Client Side Prototype Pollution Scanner☆528Sep 17, 2022Updated 3 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 4 years ago
- DOM XSS scanner for Single Page Applications☆420Nov 15, 2025Updated 8 months ago
- A better dns bruteforcer written in golang☆13Nov 4, 2018Updated 7 years ago
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago