Alternatives and similar repositories for gh_scanner

Users that are interested in gh_scanner are comparing it to the libraries listed below

• mzfr / takeover
  A tool for testing subdomain takeover possibilities at a mass scale.
  ☆49Updated 4 years ago
• eternyle / ShodanIsh
  Shodan Favicon Hash Generator By Aziz Hakim @eternyle
  ☆25Updated last year
• defparam / h1stats
  a tool that compiles a csv of all h1 program stats
  ☆47Updated 2 years ago
• dwisiswant0 / bounty-targets-alert
  It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
  ☆58Updated 3 years ago
• dwisiswant0 / wadl-dumper
  Dump all available paths and/or endpoints on WADL file.
  ☆93Updated last month
• dwisiswant0 / hinject
  Host Header Injection Checker
  ☆81Updated 3 years ago
• R0X4R / ssrf-tool
  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.
  ☆45Updated 4 years ago
• ameenmaali / endpointdiff
  Wrapper around LinkFinder to quickly determine whether endpoints have been added/removed to JavaScript files.
  ☆41Updated 5 years ago
• payloadartist / recon
  NodeJS script to extract assets for the Apple bug bounty program from their security acknowledgments page for bug bounty recon.
  ☆78Updated 2 years ago
• hakluke / hakfindinternaldomains
  Feed it a list of subdomains, it will resolve them and tell you which ones are internal
  ☆92Updated 3 years ago
• gwen001 / myrecon.py
  My recon script
  ☆50Updated 5 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 3 years ago
• RealLinkers / cookieless
  ☆27Updated 5 years ago
• th3hack3rwiz / Fu-JS
  This tool aims at accumulating javascript files from a given set of subdomains to discover hidden endpoints. It swims through JS files to…
  ☆47Updated 2 years ago
• sw33tLie / ugly-scripts
  A collection of scripts for bug-bounty related stuff
  ☆38Updated 4 years ago
• gwen001 / bxss
  Alternative to XSS Hunter for blind XSS.
  ☆51Updated 2 years ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆57Updated 3 years ago
• rook1337 / hakrawlerx8chain
  ☆14Updated 4 years ago
• hahwul / gitls
  🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline
  ☆59Updated 7 months ago
• Sicks3c / Reconizer
  ☆38Updated 4 years ago
• cqsd / daily-commonspeak2
  commonspeak2 subdomains wordlist generated daily **DEPRECATED** The author(s) of commonspeak2 maintain an official repo with more lists. …
  ☆41Updated 4 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• geeknik / nuclei-template-generator
  A simple tool which makes creating nuclei templates even easier.
  ☆37Updated last year
• xElkomy / Workflow-Bug-Bounty
  My Tools For Bug Bounty
  ☆66Updated 9 months ago
• aldo-moreno-leon / ORtester
  Open Redirect scanner - (out of date)
  ☆29Updated 2 years ago
• AdmiralGaust / bountyReconV2
  Framework to automate Bug Bounty Reconnaissance
  ☆44Updated 4 years ago
• YasserGersy / Enums
  Just lists of lists of lists !
  ☆16Updated last week
• TheBinitGhimire / GH-Takeover
  GH-Takeover — GitHub Pages Sub-domain Takeover Automation!
  ☆29Updated 4 years ago
• cybercdh / h2i
  Converts a hostname (or URI) to IP address using your local resolver
  ☆25Updated last year
• byt3hx / sonarbyte
  sonarbyte is a simple and fast subdomain scanner written in go to extract subdomain from Rapid7's DNS Database using omnisint's api.
  ☆27Updated 2 years ago