Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules
☆186Oct 30, 2021Updated 4 years ago
Alternatives and similar repositories for ugly-duckling
Users that are interested in ugly-duckling are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OWASP Amass data source scripts (assetfinder, findomain, github, subfinder)☆106Oct 18, 2020Updated 5 years ago
- Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pag…☆532Jul 3, 2026Updated last month
- ☆441Jun 1, 2021Updated 5 years ago
- A collection of BBRF agents that can be deployed to AWS lambda☆24Nov 17, 2024Updated last year
- Collection of tools to interact with Intigriti website☆17Aug 10, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)☆85Apr 5, 2021Updated 5 years ago
- Tool for making it easy to collect dns results from the CLI☆40Aug 14, 2024Updated 2 years ago
- Simple tool to send the json output from HTTPX to BBRF☆11Mar 30, 2023Updated 3 years ago
- ☆562Mar 27, 2025Updated last year
- An HTTP request smuggling scanner designed to work at scale☆25Oct 2, 2022Updated 3 years ago
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- A multi-threaded password sprayer based on Medusa, built for distributed spraying.☆37Oct 17, 2021Updated 4 years ago
- ☆17Apr 7, 2022Updated 4 years ago
- Prototype pollution scanner using headless chrome☆216Jul 27, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Scanner for Cross-Site WebSocket Hijacking☆40Feb 19, 2026Updated 5 months ago
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆61Apr 23, 2023Updated 3 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆159Nov 24, 2023Updated 2 years ago
- NodeJS script to extract assets for the Apple bug bounty program from their security acknowledgments page for bug bounty recon.☆80Nov 5, 2022Updated 3 years ago
- Weaponizing Live CT logs for automated monitoring of assets☆135Sep 12, 2021Updated 4 years ago
- Gotator is a tool to generate DNS wordlists through permutations.☆530Jul 17, 2022Updated 4 years ago
- This extension replaces the default repeater tab name with the URL path of the repeater request.☆25Sep 3, 2021Updated 4 years ago
- goverview - Get an overview of the list of URLs☆142Dec 5, 2025Updated 8 months ago
- Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.☆271Feb 5, 2026Updated 6 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆23Mar 29, 2022Updated 4 years ago
- A compilation of network scanning strategies to find vulnerable devices☆73Nov 6, 2022Updated 3 years ago
- Dump all available paths and/or endpoints on WADL file.☆96Nov 24, 2025Updated 8 months ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆336Jul 11, 2025Updated last year
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆788Aug 19, 2024Updated last year
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆94Jul 9, 2025Updated last year
- Making Favicon.ico based Recon Great again !☆1,299Aug 29, 2023Updated 2 years ago
- A high performance TCP SYN port scanner.☆317Mar 2, 2024Updated 2 years ago
- WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropr…☆51Mar 19, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The commands and scripts I used in the Live Recon Village talks☆37Mar 14, 2021Updated 5 years ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Sep 14, 2021Updated 4 years ago
- BugBounty , sort and delete duplicates param value without missing original value☆22Jul 31, 2021Updated 5 years ago
- ☆297Jul 16, 2022Updated 4 years ago
- Mass querying whois records☆29Dec 28, 2021Updated 4 years ago
- A companion repo to accompany detailed guides and YouTube content to allow users to follow along☆13Aug 29, 2020Updated 5 years ago
- ☆283Nov 12, 2021Updated 4 years ago