An automated approach to performing recon for bug bounty hunting and penetration testing.
☆450Jul 21, 2020Updated 5 years ago
Alternatives and similar repositories for LazyRecon
Users that are interested in LazyRecon are comparing it to the libraries listed below
Sorting:
- Simple shell script for automated domain recognition with some tools☆304Nov 11, 2020Updated 5 years ago
- Trying to make automated recon for bug bounties☆255May 3, 2021Updated 4 years ago
- A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.☆397Apr 17, 2020Updated 5 years ago
- This script is intended to automate your reconnaissance process in an organized fashion☆2,014Aug 19, 2021Updated 4 years ago
- information gathering☆282Jul 12, 2025Updated 7 months ago
- ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.☆727May 6, 2022Updated 3 years ago
- Multiprocessing(Parallel)Subdomain Detect Script☆329Jan 28, 2024Updated 2 years ago
- Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.☆294Nov 30, 2019Updated 6 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SS…☆174Nov 11, 2020Updated 5 years ago
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆1,053Jan 3, 2025Updated last year
- A highly configurable Framework for easy automated web scanning☆381Jul 13, 2020Updated 5 years ago
- A collection of hacks and one-off scripts☆2,424Mar 13, 2025Updated 11 months ago
- A collection of tools to perform searches on GitHub.☆1,467Feb 9, 2023Updated 3 years ago
- Poor (rich?) man's bug bounty pipeline https://dubell.io☆288Apr 24, 2023Updated 2 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,883Apr 5, 2024Updated last year
- Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts a…☆367Jul 23, 2022Updated 3 years ago
- Multi Tool Subdomain Enumeration☆723Apr 11, 2021Updated 4 years ago
- The Swiss Army knife for automated Web Application Testing☆2,323May 8, 2024Updated last year
- Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)☆459May 10, 2019Updated 6 years ago
- Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed b…☆1,027Feb 5, 2021Updated 5 years ago
- ☆435Dec 2, 2022Updated 3 years ago
- An hourly updated list of subdomains gathered from certificate transparency logs☆349Oct 13, 2021Updated 4 years ago
- Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hu…☆2,339Jun 27, 2024Updated last year
- Making Favicon.ico based Recon Great again !☆1,266Aug 29, 2023Updated 2 years ago
- Some of my bug bounty tools☆52Oct 23, 2019Updated 6 years ago
- Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.☆1,285Sep 12, 2025Updated 5 months ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,774Apr 26, 2024Updated last year
- A script that can resolve an input file of domains and scan them with masscan☆155Sep 16, 2020Updated 5 years ago
- ☆200Jun 6, 2019Updated 6 years ago
- Burp plugin able to find reflected XSS on page in real-time while browsing on site☆1,202Feb 2, 2021Updated 5 years ago
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects☆970Dec 8, 2021Updated 4 years ago
- The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, f…☆4,350Sep 30, 2024Updated last year
- This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for …☆3,659Updated this week
- A Powerful Subdomain Takeover Tool☆964Oct 17, 2023Updated 2 years ago
- Fetches javascript file from a list of URLS or subdomains.☆837Jul 22, 2025Updated 7 months ago
- A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.☆921Nov 19, 2025Updated 3 months ago
- Subdomain Takeover tool written in Go☆2,033Aug 13, 2023Updated 2 years ago
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆6,382Sep 14, 2023Updated 2 years ago
- A fuzzer for detecting open redirect vulnerabilities☆782Jul 1, 2024Updated last year