Alternatives and similar repositories for bugcrowd-levelup-subdomain-enumeration

Users that are interested in bugcrowd-levelup-subdomain-enumeration are comparing it to the libraries listed below

• appsecco / the-art-of-subdomain-enumeration

  View on GitHub
  This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  ☆662Jan 30, 2019Updated 7 years ago
• appsecco / spaces-finder

  View on GitHub
  A tool to hunt for publicly accessible DigitalOcean Spaces
  ☆156Jan 21, 2020Updated 6 years ago
• bugcrowd / HUNT

  View on GitHub
  ☆2,315Dec 8, 2023Updated 2 years ago
• jobertabma / virtual-host-discovery

  View on GitHub
  A script to enumerate virtual hosts on a server.
  ☆691Dec 28, 2017Updated 8 years ago
• infosec-au / altdns

  View on GitHub
  Generates permutations, alterations and mutations of subdomains and then resolves them
  ☆2,468Jan 9, 2025Updated last year
• maK- / parameth

  View on GitHub
  This tool can be used to brute discover GET and POST parameters
  ☆1,390Aug 24, 2019Updated 6 years ago
• cujanovic / SSRF-Testing

  View on GitHub
  SSRF (Server Side Request Forgery) testing resources
  ☆2,484Oct 12, 2024Updated last year
• vysecurity / DomLink

  View on GitHub
  A tool to link a domain with registered organisation names and emails, to other domains.
  ☆846May 16, 2024Updated last year
• jobertabma / ground-control

  View on GitHub
  A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.
  ☆550Jun 12, 2017Updated 8 years ago
• michenriksen / aquatone

  View on GitHub
  A Tool for Domain Flyovers
  ☆5,896May 22, 2022Updated 3 years ago
• Ice3man543 / SubOver

  View on GitHub
  A Powerful Subdomain Takeover Tool
  ☆962Oct 17, 2023Updated 2 years ago
• anshumanbh / tko-subs

  View on GitHub
  A tool that can help detect and takeover subdomains with dead DNS records
  ☆773Jan 3, 2021Updated 5 years ago
• yassineaboukir / sublert

  View on GitHub
  Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed b…
  ☆1,028Feb 5, 2021Updated 5 years ago
• codingo / VHostScan

  View on GitHub
  A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, al…
  ☆1,283Aug 18, 2025Updated 5 months ago
• haccer / subjack

  View on GitHub
  Subdomain Takeover tool written in Go
  ☆2,026Aug 13, 2023Updated 2 years ago
• blechschmidt / massdns

  View on GitHub
  A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
  ☆3,528Jul 21, 2025Updated 6 months ago
• P3GLEG / PwnBack

  View on GitHub
  Burp Extender plugin that generates a sitemap of a website using Wayback Machine
  ☆227May 8, 2018Updated 7 years ago
• zseano / InputScanner

  View on GitHub
  ☆250Jun 6, 2018Updated 7 years ago
• VirtueSecurity / aws-extender

  View on GitHub
  AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.
  ☆256Feb 23, 2022Updated 3 years ago
• BuffaloWill / oxml_xxe

  View on GitHub
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,129Dec 16, 2024Updated last year
• appsecco / practical-recon-levelup0x02

  View on GitHub
  This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd Level…
  ☆62Jan 24, 2019Updated 7 years ago
• TypeError / domained

  View on GitHub
  Multi Tool Subdomain Enumeration
  ☆724Apr 11, 2021Updated 4 years ago
• anshumanbh / git-all-secrets

  View on GitHub
  A tool to capture all the git secrets by leveraging multiple open source git searching tools
  ☆1,143Jun 25, 2019Updated 6 years ago
• PortSwigger / backslash-powered-scanner

  View on GitHub
  Finds unknown classes of injection vulnerabilities
  ☆708Apr 30, 2025Updated 9 months ago
• 0xbharath / censys-enumeration

  View on GitHub
  A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
  ☆153Dec 7, 2022Updated 3 years ago
• anshumanbh / brutesubs

  View on GitHub
  An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker …
  ☆260Aug 22, 2021Updated 4 years ago
• EdOverflow / megplus

  View on GitHub
  Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
  ☆305Oct 14, 2018Updated 7 years ago
• nashcontrol / bounty-monitor

  View on GitHub
  Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …
  ☆224Dec 7, 2022Updated 3 years ago
• vulnersCom / burp-vulners-scanner

  View on GitHub
  Vulnerability scanner based on vulners.com search API
  ☆882Oct 1, 2025Updated 4 months ago
• bugbountyforum / XSS-Radar

  View on GitHub
  ☆332Jan 8, 2018Updated 8 years ago
• jordanpotti / AWSBucketDump

  View on GitHub
  Security Tool to Look For Interesting Files in S3 Buckets
  ☆1,456Apr 10, 2024Updated last year
• franccesco / getaltname

  View on GitHub
  Extract subdomains from SSL certificates in HTTPS sites.
  ☆388Mar 3, 2025Updated 11 months ago
• jhaddix / domain

  View on GitHub
  Setup script for Regon-ng
  ☆936Nov 17, 2020Updated 5 years ago
• jobertabma / recon.sh

  View on GitHub
  A toolset to track and organize output of reconnaissance tools
  ☆346Jan 3, 2018Updated 8 years ago
• 003random / 003Recon

  View on GitHub
  Some tools to automate recon - 003random
  ☆294Jun 5, 2018Updated 7 years ago
• jobertabma / relative-url-extractor

  View on GitHub
  A small tool that extracts relative URLs from a file.
  ☆767Sep 23, 2020Updated 5 years ago
• tomdev / teh_s3_bucketeers

  View on GitHub
  ☆276Oct 19, 2021Updated 4 years ago
• orangetw / Tiny-URL-Fuzzer

  View on GitHub
  A tiny and cute URL fuzzer
  ☆402Nov 10, 2022Updated 3 years ago
• nahamsec / JSParser

  View on GitHub
  ☆835Nov 13, 2023Updated 2 years ago