Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules
☆186Oct 30, 2021Updated 4 years ago
Alternatives and similar repositories for ugly-duckling
Users that are interested in ugly-duckling are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OWASP Amass data source scripts (assetfinder, findomain, github, subfinder)☆106Oct 18, 2020Updated 5 years ago
- Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pag…☆531Jul 3, 2026Updated 2 months ago
- ☆441Jun 1, 2021Updated 5 years ago
- A collection of BBRF agents that can be deployed to AWS lambda☆24Nov 17, 2024Updated last year
- Collection of tools to interact with Intigriti website☆17Aug 10, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)☆85Apr 5, 2021Updated 5 years ago
- Tool for making it easy to collect dns results from the CLI☆40Aug 14, 2024Updated 2 years ago
- Simple tool to send the json output from HTTPX to BBRF☆11Mar 30, 2023Updated 3 years ago
- ☆563Mar 27, 2025Updated last year
- An HTTP request smuggling scanner designed to work at scale☆25Oct 2, 2022Updated 3 years ago
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- A multi-threaded password sprayer based on Medusa, built for distributed spraying.☆37Oct 17, 2021Updated 4 years ago
- ☆17Apr 7, 2022Updated 4 years ago
- Prototype pollution scanner using headless chrome☆217Jul 27, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Scanner for Cross-Site WebSocket Hijacking☆40Feb 19, 2026Updated 6 months ago
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆61Apr 23, 2023Updated 3 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆159Nov 24, 2023Updated 2 years ago
- NodeJS script to extract assets for the Apple bug bounty program from their security acknowledgments page for bug bounty recon.☆80Nov 5, 2022Updated 3 years ago
- Weaponizing Live CT logs for automated monitoring of assets☆135Sep 12, 2021Updated 4 years ago
- Gotator is a tool to generate DNS wordlists through permutations.☆532Jul 17, 2022Updated 4 years ago
- This extension replaces the default repeater tab name with the URL path of the repeater request.☆25Sep 3, 2021Updated 5 years ago
- goverview - Get an overview of the list of URLs☆142Dec 5, 2025Updated 8 months ago
- Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.☆274Feb 5, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆23Mar 29, 2022Updated 4 years ago
- A compilation of network scanning strategies to find vulnerable devices☆74Nov 6, 2022Updated 3 years ago
- Dump all available paths and/or endpoints on WADL file.☆96Nov 24, 2025Updated 9 months ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆337Jul 11, 2025Updated last year
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆790Aug 19, 2024Updated 2 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆94Jul 9, 2025Updated last year
- Making Favicon.ico based Recon Great again !☆1,300Aug 29, 2023Updated 3 years ago
- A high performance TCP SYN port scanner.☆317Mar 2, 2024Updated 2 years ago
- WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropr…☆51Mar 19, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Sep 14, 2021Updated 4 years ago
- The commands and scripts I used in the Live Recon Village talks☆37Mar 14, 2021Updated 5 years ago
- BugBounty , sort and delete duplicates param value without missing original value☆22Jul 31, 2021Updated 5 years ago
- ☆297Jul 16, 2022Updated 4 years ago
- Mass querying whois records☆29Dec 28, 2021Updated 4 years ago
- A companion repo to accompany detailed guides and YouTube content to allow users to follow along☆13Aug 29, 2020Updated 6 years ago
- Contextual Content Discovery Tool☆3,251Jul 10, 2026Updated last month