Alternatives and similar repositories for ugly-duckling

Users that are interested in ugly-duckling are comparing it to the libraries listed below

• devanshbatham / CertEagle
  Weaponizing Live CT logs for automated monitoring of assets
  ☆134Updated 4 years ago
• bytebutcher / burp-send-to
  Adds a customizable "Send to..."-context-menu to your BurpSuite.
  ☆163Updated 3 years ago
• orlyjamie / asnrecon
  ASN reconnaissance script
  ☆133Updated last year
• codingo / dooked
  DNS and Target HTTP History Local Storage and Search
  ☆64Updated 4 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆98Updated 3 years ago
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆205Updated 2 years ago
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆219Updated 3 years ago
• Shivangx01b / CorsMe
  Cross Origin Resource Sharing MisConfiguration Scanner
  ☆175Updated 4 years ago
• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆93Updated 4 months ago
• righettod / burp-piper-custom-scripts
  Custom scripts for the PIPER Burp extensions.
  ☆98Updated 2 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated last year
• codingo / bbr
  An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.
  ☆217Updated 5 years ago
• LewisArdern / metasecjs
  MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
  ☆81Updated 2 years ago
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆137Updated 5 years ago
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆72Updated 5 years ago
• dark-warlord14 / ffufplus
  You can read the writeup on this script here
  ☆192Updated 4 years ago
• detectify / cs-challenge
  Detectify Crowdsource Challenge
  ☆70Updated 3 years ago
• PatrikFehrenbach / amass-tools
  ☆105Updated 5 years ago
• brevityinmotion / brevityrecon
  ☆68Updated 3 years ago
• allyomalley / BurpParamFlagger
  A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…
  ☆132Updated 4 years ago
• yeswehack / xsstools
  xss development frameworks, with the goal of making payload writing easier.
  ☆152Updated last year
• david3107 / graphql-security-labs
  GraphQL security workshop labs
  ☆116Updated last month
• Cache-Money / chronorace
  ☆73Updated 4 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆52Updated 4 years ago
• MilindPurswani / whoxyrm
  A reverse whois tool based on Whoxy API.
  ☆167Updated last year
• lc / jenkinz
  Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.
  ☆67Updated 7 months ago
• dariusztytko / vhosts-sieve
  Searching for virtual hosts among non-resolvable domains
  ☆88Updated 5 years ago
• putsi / privatecollaborator
  A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
  ☆211Updated last year
• trufflesecurity / of-CORS
  ☆153Updated 2 years ago
• dwisiswant0 / slackcat
  A simple way of sending messages from the CLI output to your Slack with webhook.
  ☆116Updated last year