Alternatives and similar repositories for ugly-duckling

Users that are interested in ugly-duckling are comparing it to the libraries listed below

• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆93Updated 5 months ago
• devanshbatham / CertEagle
  Weaponizing Live CT logs for automated monitoring of assets
  ☆133Updated 4 years ago
• righettod / burp-piper-custom-scripts
  Custom scripts for the PIPER Burp extensions.
  ☆98Updated 2 years ago
• codingo / dooked
  DNS and Target HTTP History Local Storage and Search
  ☆63Updated 4 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated last year
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆136Updated 5 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆182Updated 3 years ago
• orlyjamie / asnrecon
  ASN reconnaissance script
  ☆130Updated last year
• bytebutcher / burp-send-to
  Adds a customizable "Send to..."-context-menu to your BurpSuite.
  ☆163Updated 3 years ago
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆72Updated 5 years ago
• brevityinmotion / brevityrecon
  ☆68Updated 3 years ago
• Shivangx01b / CorsMe
  Cross Origin Resource Sharing MisConfiguration Scanner
  ☆174Updated 4 years ago
• PatrikFehrenbach / amass-tools
  ☆105Updated 5 years ago
• dwisiswant0 / slackcat
  A simple way of sending messages from the CLI output to your Slack with webhook.
  ☆116Updated 2 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆52Updated 4 years ago
• Cache-Money / chronorace
  ☆73Updated 4 years ago
• smaranchand / bucky
  Bucky (An automatic S3 bucket discovery tool)
  ☆198Updated 3 years ago
• ptswarm / ptswarm-twitter
  ☆76Updated 5 years ago
• ignis-sec / puff
  Clientside vulnerability / reflected xss fuzzer
  ☆149Updated 2 years ago
• codingo / microsubs
  A collection of code for interacting with API sources directly to improve your understanding of those services.
  ☆66Updated 5 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆98Updated 3 years ago
• war-and-code / akamai-arl-hack
  Script to test open Akamai ARL vulnerability.
  ☆70Updated 4 years ago
• dariusztytko / vhosts-sieve
  Searching for virtual hosts among non-resolvable domains
  ☆88Updated 5 years ago
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆205Updated 2 years ago
• yeswehack / xsstools
  xss development frameworks, with the goal of making payload writing easier.
  ☆153Updated last year
• trufflesecurity / of-CORS
  ☆154Updated 2 years ago
• sw33tLie / bcscope
  Get the scope of your bugcrowd programs
  ☆67Updated 5 years ago
• lc / jenkinz
  Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.
  ☆67Updated 8 months ago
• janmasarik / bugshop
  ☆44Updated 5 years ago
• shivsahni / NSBrute
  Python utility to takeover domains vulnerable to AWS NS Takeover
  ☆86Updated 2 years ago