Alternatives and similar repositories for vulnlabs

Users that are interested in vulnlabs are comparing it to the libraries listed below

• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆26Updated 5 years ago
• hahwul / action-dalfox
  XSS scanning with Dalfox on Github-action
  ☆26Updated 2 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 4 years ago
• bp0lr / myGF_patterns
  ☆21Updated 5 years ago
• muffyhub / Mindmaps
  ☆19Updated 4 years ago
• KathanP19 / Python_For_Pentester
  Programs I Made while learning python for pentesters.
  ☆20Updated 3 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• koaj / ffw-content-discovery
  Funny Fuzzing Wordlist
  ☆14Updated 3 years ago
• BrownBearSec / Utils-and-Wrappers
  A repo for tools, utils, and wrappers that are to small to put in their own repo.
  ☆23Updated 2 years ago
• emadshanab / Subdomains-brutforce-wordlists-collection
  ☆40Updated 4 years ago
• ahmad0x1 / Acquisitions
  Python Script to Print the name of the companies that are acquired by a Target Company and the Time of Acquisition.
  ☆26Updated 4 years ago
• R0X4R / ssrf-tool
  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.
  ☆45Updated 5 years ago
• ryandamour / crlfmap
  CRLFMap is a tool to find HTTP Splitting vulnerabilities
  ☆33Updated 5 years ago
• byt3hx / gup
  gup aka Get All Urls parameters to create wordlists for brute forcing parameters.
  ☆18Updated 4 years ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆58Updated 3 years ago
• 0xPugal / bugbounty_profile
  Automate bug bounty recon using bash alias
  ☆15Updated last year
• Sicks3c / Reconizer
  ☆38Updated 5 years ago
• emadshanab / 971-MB-content_discovery_wordlist
  Collection of content discovery wordlists in one wordlist.
  ☆38Updated 4 years ago
• thelikes / fuzznav
  parse ffuf & map endpoints to wordlists
  ☆21Updated 4 years ago
• notmarshmllow / Bug-Hunting-With-Bash
  Cool One Liners at one place to make your recon and bug bounty skills better !
  ☆15Updated 5 years ago
• ethicalhackingplayground / Gxss
  Tool for checking reflecting Parameters in a URL.
  ☆10Updated 5 years ago
• z3dc0ps / 0x0p1n3r
  0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover
  ☆57Updated 5 years ago
• payloadartist / recon
  NodeJS script to extract assets for the Apple bug bounty program from their security acknowledgments page for bug bounty recon.
  ☆78Updated 3 years ago
• hisxo / Wordlist
  Wordlists for Bug Bounty
  ☆23Updated 6 years ago
• eternyle / ShodanIsh
  Shodan Favicon Hash Generator By Aziz Hakim @eternyle
  ☆26Updated last year
• notmarshmllow / credax
  Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.
  ☆10Updated 4 years ago
• boku7 / gsCMS-CustomJS-Csrf2Xss2Rce
  GetSimple CMS Custom JS Plugin Exploit RCE Chain
  ☆11Updated 2 years ago
• KathanP19 / OpenBB-Scope
  OpenBugBounty - https://www.openbugbounty.org/ programs list
  ☆23Updated 4 years ago
• adarshshetty18 / fcm_server_key
  Tool to extract & validate google fcm server keys from apks
  ☆30Updated 5 years ago
• hahwul / hbxss
  Security test tool for Blind XSS
  ☆26Updated 5 years ago