Alternatives and similar repositories for whonow

Users that are interested in whonow are comparing it to the libraries listed below

• brannondorsey / dns-rebind-toolkit
  A front-end JavaScript toolkit for creating DNS rebinding attacks.
  ☆507Updated 3 years ago
• FSecureLABS / dref
  DNS Rebinding Exploitation Framework
  ☆492Updated 4 years ago
• PortSwigger / hackability
  Probe a rendering engine for vulnerabilities and other features
  ☆367Updated 3 years ago
• PortSwigger / collaborator-everywhere
  A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by caus…
  ☆435Updated 4 months ago
• appsecco / bugcrowd-levelup-subdomain-enumeration
  This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtu…
  ☆633Updated 6 years ago
• SolomonSklash / chomp-scan
  A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
  ☆396Updated 5 years ago
• mandatoryprogrammer / cloudflare_enum
  Cloudflare DNS Enumeration Tool for Pentesters
  ☆523Updated 3 years ago
• davidpepper / fierce-domain-scanner
  Fierce.pl Domain Scanner
  ☆300Updated 6 years ago
• mazen160 / bfac
  BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source c…
  ☆553Updated 3 years ago
• TypeError / domained
  Multi Tool Subdomain Enumeration
  ☆725Updated 4 years ago
• evilpacket / DVCS-Pillage
  Pillage web accessible GIT, HG and BZR repositories
  ☆320Updated 8 years ago
• ropnop / serverless_toolkit
  A collection of useful Serverless functions I use when pentesting
  ☆388Updated 2 years ago
• cheetz / sslScrape
  SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
  ☆334Updated 4 years ago
• jcesarstef / dotdotslash
  Search for Directory Traversal Vulnerabilities
  ☆451Updated last month
• AonCyberLabs / PadBuster
  Automated script for performing Padding Oracle attacks
  ☆787Updated last year
• dxa4481 / cssInjection
  Stealing CSRF tokens with CSS injection (without iFrames)
  ☆324Updated 7 years ago
• RhinoSecurityLabs / SleuthQL
  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  ☆470Updated 5 years ago
• mandatoryprogrammer / JudasDNS
  Nameserver DNS poisoning attacks made easy
  ☆524Updated 8 years ago
• bitquark / dnspop
  Analysis of DNS records to find popular trends
  ☆449Updated 9 years ago
• mazen160 / server-status_PWN
  A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-s…
  ☆436Updated 3 years ago
• jobertabma / ground-control
  A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.
  ☆549Updated 8 years ago
• chris408 / ct-exposer
  An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
  ☆471Updated 3 years ago
• nettitude / xss_payloads
  Exploitation for XSS
  ☆722Updated 4 years ago
• initstring / uptux
  Linux privilege escalation checks (systemd, dbus, socket fun, etc)
  ☆290Updated 5 years ago
• govolution / betterdefaultpasslist
  ☆609Updated 10 months ago
• nccgroup / tracy
  A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
  ☆564Updated 2 years ago
• lanjelot / kb
  All my infosec notes I have been building up over the years
  ☆336Updated 6 months ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆547Updated 5 years ago
• appsecco / the-art-of-subdomain-enumeration
  This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  ☆657Updated 6 years ago
• bugbountyforum / XSS-Radar
  ☆327Updated 7 years ago