Alternatives and similar repositories for ugly-duckling

Users that are interested in ugly-duckling are comparing it to the libraries listed below

• devanshbatham / CertEagle
  Weaponizing Live CT logs for automated monitoring of assets
  ☆134Updated 4 years ago
• brevityinmotion / brevityrecon
  ☆69Updated 3 years ago
• orlyjamie / asnrecon
  ASN reconnaissance script
  ☆132Updated last year
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆72Updated 5 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated last year
• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆93Updated 4 months ago
• Shivangx01b / CorsMe
  Cross Origin Resource Sharing MisConfiguration Scanner
  ☆175Updated 3 years ago
• ffuf / ffuf-scripts
  Scripts to help with different ffuf tasks and workflows
  ☆224Updated last year
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆205Updated 2 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆99Updated 3 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆182Updated 3 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆126Updated 3 years ago
• david3107 / graphql-security-labs
  GraphQL security workshop labs
  ☆116Updated 3 weeks ago
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆219Updated 3 years ago
• bytebutcher / burp-send-to
  Adds a customizable "Send to..."-context-menu to your BurpSuite.
  ☆163Updated 2 years ago
• codingo / dooked
  DNS and Target HTTP History Local Storage and Search
  ☆64Updated 4 years ago
• AvasDream / pentesting-dockerfiles
  Pentesting/Bugbounty Dockerfiles.
  ☆177Updated 4 years ago
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆136Updated 5 years ago
• righettod / burp-piper-custom-scripts
  Custom scripts for the PIPER Burp extensions.
  ☆98Updated 2 years ago
• allyomalley / BurpParamFlagger
  A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…
  ☆133Updated 4 years ago
• PatrikFehrenbach / amass-tools
  ☆108Updated 5 years ago
• codingo / microsubs
  A collection of code for interacting with API sources directly to improve your understanding of those services.
  ☆66Updated 4 years ago
• yeswehack / xsstools
  xss development frameworks, with the goal of making payload writing easier.
  ☆150Updated last year
• ptswarm / ptswarm-twitter
  ☆76Updated 4 years ago
• pry0cc / proteus
  A projectdiscovery driven attack surface monitoring bot powered by axiom
  ☆191Updated 3 years ago
• The-Login / DNS-Reset-Checker
  Tools to assess the DNS security of web applications
  ☆128Updated 3 years ago
• putsi / privatecollaborator
  A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
  ☆212Updated last year
• trufflesecurity / of-CORS
  ☆153Updated 2 years ago
• codingo / bbr
  An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.
  ☆217Updated 5 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆192Updated 5 years ago