Alternatives and similar repositories for ugly-duckling

Users that are interested in ugly-duckling are comparing it to the libraries listed below

• devanshbatham / CertEagle
  Weaponizing Live CT logs for automated monitoring of assets
  ☆134Updated 3 years ago
• bytebutcher / burp-send-to
  Adds a customizable "Send to..."-context-menu to your BurpSuite.
  ☆161Updated 2 years ago
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆71Updated 4 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated 9 months ago
• PatrikFehrenbach / amass-tools
  ☆108Updated 4 years ago
• orlyjamie / asnrecon
  ASN reconnaissance script
  ☆127Updated last year
• yeswehack / xsstools
  xss development frameworks, with the goal of making payload writing easier.
  ☆143Updated 11 months ago
• Shivangx01b / CorsMe
  Cross Origin Resource Sharing MisConfiguration Scanner
  ☆173Updated 3 years ago
• righettod / burp-piper-custom-scripts
  Custom scripts for the PIPER Burp extensions.
  ☆98Updated last year
• codingo / dooked
  DNS and Target HTTP History Local Storage and Search
  ☆64Updated 4 years ago
• brevityinmotion / brevityrecon
  ☆68Updated 3 years ago
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆134Updated 4 years ago
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆202Updated 2 years ago
• Cache-Money / chronorace
  ☆72Updated 3 years ago
• david3107 / graphql-security-labs
  GraphQL security workshop labs
  ☆112Updated this week
• dwisiswant0 / slackcat
  A simple way of sending messages from the CLI output to your Slack with webhook.
  ☆115Updated last year
• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆92Updated this week
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆177Updated 2 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆98Updated 2 years ago
• dariusztytko / vhosts-sieve
  Searching for virtual hosts among non-resolvable domains
  ☆88Updated 5 years ago
• ptswarm / ptswarm-twitter
  ☆76Updated 4 years ago
• detectify / cs-challenge
  Detectify Crowdsource Challenge
  ☆69Updated 3 years ago
• codingo / microsubs
  A collection of code for interacting with API sources directly to improve your understanding of those services.
  ☆65Updated 4 years ago
• codingo / bbr
  An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.
  ☆211Updated 4 years ago
• smaranchand / bucky
  Bucky (An automatic S3 bucket discovery tool)
  ☆197Updated 3 years ago
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆219Updated 2 years ago
• dark-warlord14 / ffufplus
  You can read the writeup on this script here
  ☆193Updated 3 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆122Updated 3 years ago
• Abss0x7tbh / bass
  Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …
  ☆147Updated last year
• lc / jenkinz
  Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.
  ☆67Updated 2 months ago