Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists
☆768Feb 12, 2023Updated 3 years ago
Alternatives and similar repositories for commonspeak2
Users that are interested in commonspeak2 are comparing it to the libraries listed below
Sorting:
- Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.☆543Aug 23, 2018Updated 7 years ago
- Generates permutations, alterations and mutations of subdomains and then resolves them☆2,474Jan 9, 2025Updated last year
- A collection of tools to perform searches on GitHub.☆1,467Feb 9, 2023Updated 3 years ago
- Content discovery wordlists generated using BigQuery☆581Apr 26, 2020Updated 5 years ago
- MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering…☆1,593Feb 23, 2026Updated last week
- Automated & Manual Wordlists provided by Assetnote☆1,631Updated this week
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆1,053Jan 3, 2025Updated last year
- Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.☆729Jan 16, 2024Updated 2 years ago
- An hourly updated list of subdomains gathered from certificate transparency logs☆349Oct 13, 2021Updated 4 years ago
- Fetch many paths for many hosts - without killing the hosts☆1,695Feb 3, 2024Updated 2 years ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,082Aug 14, 2024Updated last year
- Contextual Content Discovery Tool☆3,096Apr 29, 2024Updated last year
- A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)☆3,541Jul 21, 2025Updated 7 months ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆4,837Jan 1, 2025Updated last year
- A permutation generation tool written in golang☆209Jul 15, 2019Updated 6 years ago
- A collection of hacks and one-off scripts☆2,424Mar 13, 2025Updated 11 months ago
- A python script that finds endpoints in JavaScript files☆4,286Apr 13, 2024Updated last year
- A tool to link a domain with registered organisation names and emails, to other domains.☆847May 16, 2024Updated last year
- Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.☆1,285Sep 12, 2025Updated 5 months ago
- Subdomain Takeover tool written in Go☆2,028Aug 13, 2023Updated 2 years ago
- Gotator is a tool to generate DNS wordlists through permutations.☆506Jul 17, 2022Updated 3 years ago
- A Powerful Subdomain Takeover Tool☆964Oct 17, 2023Updated 2 years ago
- "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.☆5,565Feb 8, 2025Updated last year
- ☆626Feb 1, 2024Updated 2 years ago
- EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.☆5,650Jan 5, 2026Updated last month
- This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for …☆3,651Updated this week
- The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, f…☆4,350Sep 30, 2024Updated last year
- Fetches javascript file from a list of URLS or subdomains.☆835Jul 22, 2025Updated 7 months ago
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,401Sep 13, 2024Updated last year
- The Swiss Army knife for automated Web Application Testing☆2,322May 8, 2024Updated last year
- Accept URLs on stdin, replace all query string values with a user-supplied value☆865Nov 23, 2022Updated 3 years ago
- Making Favicon.ico based Recon Great again !☆1,266Aug 29, 2023Updated 2 years ago
- Rust-based high performance domain permutation generator.☆300Dec 2, 2023Updated 2 years ago
- Pull out bits of URLs provided on stdin☆1,287Aug 12, 2023Updated 2 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆953Dec 31, 2021Updated 4 years ago
- OSINT tools and more but without API key☆1,482Feb 15, 2026Updated 2 weeks ago
- A rapid API for the Project Sonar dataset☆658May 5, 2023Updated 2 years ago
- A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.☆1,851May 20, 2024Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domain☆4,330May 1, 2024Updated last year