Pen Hunter is a comprehensive vulnerability scanning tool designed for penetration testers, security researchers and bug bounties. it automates the process of collecting subdomains and URLs and tests them for various vulnerabilities including XSS, SQL Injection, Local File Inclusion, Open Redirect, Server-Side Request Forgery, CSRF, and RCE.
☆59Jul 12, 2026Updated 3 months ago
Alternatives and similar repositories for PenHunter
Users that are interested in PenHunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Mar 1, 2025Updated last year
- ☆13Mar 6, 2025Updated last year
- AKCA Advanced Web Security Scanner☆251Oct 24, 2026Updated last week
- A high-accuracy, behavioral cache poisoning scanner for modern Web APIs☆13Dec 10, 2025Updated 10 months ago
- Compiled UACME☆12Jul 2, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Grab form parameters easily☆14Dec 11, 2024Updated last year
- Ultra-fast hybrid IPv4/IPv6 port scanner with adaptive concurrency, banner grab, TLS sniff, and built-in httpx + nuclei recon pipeline — …☆15Sep 30, 2026Updated last month
- ☆13Mar 12, 2022Updated 4 years ago
- Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface (CVE-2025-53392)☆14Jan 1, 2026Updated 10 months ago
- The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.☆46Oct 10, 2026Updated 3 weeks ago
- Shellcode Loader Library.☆15Sep 21, 2025Updated last year
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned …☆13Nov 14, 2025Updated 11 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Metasploit module for CVE-2025-24071 - Windows NTLM Hash Leak via .library-ms☆25Mar 18, 2025Updated last year
- jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying se…☆544Sep 20, 2026Updated last month
- Custom Black arch based docker container for continuous automated red teaming☆25Jan 21, 2026Updated 9 months ago
- macOS 100 Power-User Tweaks & Interactive Terminal TUI/CLI (2026 - Tahoe Ready)☆22Sep 1, 2026Updated 2 months ago
- ☆20Updated this week
- ☆16Mar 23, 2026Updated 7 months ago
- Script to exploit Grafana CVE-2025-4123: XSS and Full-Read SSRF☆58Jul 28, 2025Updated last year
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆17Sep 23, 2026Updated last month
- If you're using Burp Suite Community Edition and want to supercharge your workflow with some powerful AI assistance – without needing Bur…☆57Apr 16, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- BountyForge Professional Recon Environment Installer☆18Nov 22, 2025Updated 11 months ago
- ☆29Sep 9, 2024Updated 2 years ago
- An advanced keylogger with a GUI redirects traffic via TOR, designed to be executed on unix operating systems☆13Mar 2, 2021Updated 5 years ago
- Dnsbruter is a powerful tool designed to perform active subdomain enumeration and discovery. It uses DNS resolution to efficiently brutef…☆128Dec 17, 2024Updated last year
- Nuclei-AI-Prompts☆365Jun 22, 2025Updated last year
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- A two-domain Active Directory lab - lab.local + corp.local, 5 machines, 3 flags. Runs on VirtualBox. Spin it up and see how far you get.☆33Jul 26, 2026Updated 3 months ago
- ☆19Nov 28, 2024Updated last year
- Search for all leaked keys/secrets using one regex! bugbounty☆248Mar 29, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AI 自主渗透测试系统 | 百度“agent+”攻防挑战赛冠军项目☆18Oct 12, 2026Updated 3 weeks ago
- PandaCrypter is a C#-based tool designed to convert PowerShell scripts into obfuscated batch files (.bat) with encryption and additional …☆55Aug 16, 2025Updated last year
- Burpsuite Extension for Jsmon☆25Jul 1, 2026Updated 4 months ago
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 9 months ago
- Building an example E-Commerce front-page using SolidJs. This is mostly an excercise in the new framework and mixing css modules with sas…☆10Jun 7, 2022Updated 4 years ago
- a personal leaks database to improve combolists and for more effective pentests☆26Sep 4, 2023Updated 3 years ago
- Extends Model Context Protocol (MCP) to local LLMs via Ollama, enabling Claude-like tool use (files, web, email, GitHub, AI images) while…☆26Aug 18, 2026Updated 2 months ago