Pen Hunter is a comprehensive vulnerability scanning tool designed for penetration testers, security researchers and bug bounties. it automates the process of collecting subdomains and URLs and tests them for various vulnerabilities including XSS, SQL Injection, Local File Inclusion, Open Redirect, Server-Side Request Forgery, CSRF, and RCE.
☆30Jul 12, 2026Updated last month
Alternatives and similar repositories for PenHunter
Users that are interested in PenHunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying se…☆530Updated this week
- Pentesting tool to automate common op tasks and organize discovered data.☆14Updated this week
- Comprehensive operational knowledge base: OSINT, forensics, reverse engineering, malware analysis, cryptography, smart-contract audit, …☆45Jul 28, 2026Updated 2 weeks ago
- TUI bash history for Linux in C (CLI)☆15Dec 1, 2024Updated last year
- CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to uploa…☆13Jan 7, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Automated way to extract juicy info with subfinder and waybackurls☆41Aug 24, 2025Updated 11 months ago
- A CLI utility to scan S3 buckets permissions☆14May 14, 2023Updated 3 years ago
- Grab form parameters easily☆14Dec 11, 2024Updated last year
- This repository contains all the GF-Patterns Repositories. All we have to do is just to run the given Shell File and it's Done !!☆21Jun 28, 2025Updated last year
- CTF Helper is a powerful, modular Command Line Interface (CLI) tool designed for Capture The Flag (CTF) competitions and cybersecurity ta…☆35May 15, 2026Updated 2 months ago
- AdGuard Home via Tailscale☆11Nov 8, 2022Updated 3 years ago
- Dockerized version of INetSim☆20Apr 24, 2023Updated 3 years ago
- Crawlex is a powerful Chrome extension designed to assist bug bounty hunters in their work by enabling easy crawling of all possible URLs…☆12May 28, 2023Updated 3 years ago
- docker gitlab ssl traefik autodeploy☆13Feb 12, 2019Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆13Jan 30, 2025Updated last year
- vault-consul-swarm-cluster☆10Aug 18, 2018Updated 7 years ago
- Script to exploit Grafana CVE-2025-4123: XSS and Full-Read SSRF☆57Jul 28, 2025Updated last year
- A powerful and sophisticated tool for detecting and exploiting open redirect vulnerabilities using the sed utility and a selected list of…☆47Jul 23, 2026Updated 3 weeks ago
- VMware Products License Keys☆13Feb 22, 2025Updated last year
- The repo contains publicly available malware analysis and reversing resources.☆17Oct 13, 2025Updated 10 months ago
- VirtualBox Web Control Panel is a lightweight HTTP server script providing a simple web interface to list, control, and interact with Vir…☆25Apr 15, 2025Updated last year
- This script checks the status of URLs to see if they are alive or not.☆13Nov 22, 2024Updated last year
- An intermediary between Cloudflare's Argo tunneling service and your local containers/network.☆12Aug 27, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆13Jul 8, 2020Updated 6 years ago
- Bug Bounty ultimate tool☆28Jun 28, 2026Updated last month
- A high-performance Go-based tool for checking the availability and responsiveness of domains, utilizing both HTTP requests and browser au…☆93Nov 26, 2024Updated last year
- GUI Exploit Tool for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)☆16May 9, 2024Updated 2 years ago
- Terraform Azure Verified Resource Module for Resource Group☆12Updated this week
- 一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出(dumpall Golang重构版)☆21Updated this week
- A full development environment in HTTPS with a valid certificate for your local development domain with mkcert, Nx workspace, angular, re…☆13Oct 9, 2020Updated 5 years ago
- BookMark and Find Subdomains, Endpoints, External Domains in your web browser.☆30Aug 1, 2025Updated last year
- ☆17Jul 11, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Get gmail alternate email and GAIA ID by gmail with API interface☆27Jul 16, 2023Updated 3 years ago
- OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.☆26Mar 10, 2023Updated 3 years ago
- Visually inspect JSON data from the terminal☆36Oct 25, 2025Updated 9 months ago
- Configurations to implement Wazuh☆13Nov 28, 2022Updated 3 years ago
- Send CloudWatch Logs Securely to Syslog via a Lambda function☆22Nov 3, 2017Updated 8 years ago
- Rosie the Pivoter☆17Sep 2, 2018Updated 7 years ago
- Grab Eufy Device ID with Python☆12Mar 2, 2023Updated 3 years ago