AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gathering subdomains, scanning ports, detecting technologies, mapping GitHub repositories, fuzzing, testing vulnerabilities, and AI analysis.
☆379Oct 8, 2026Updated 3 weeks ago
Alternatives and similar repositories for AutoAR
Users that are interested in AutoAR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bug Bounty Methodology☆341Oct 5, 2026Updated last month
- Cyber Security Notes, Methodology, Resources and Tips☆277Jul 20, 2026Updated 3 months ago
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆491Oct 14, 2026Updated 3 weeks ago
- A Collection of Wordlists for Penetration Testing☆44Mar 13, 2026Updated 7 months ago
- ☆50Feb 27, 2026Updated 8 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Collection of templates from various resources☆48Jun 17, 2026Updated 4 months ago
- FOFA Hacking Queries - API Key Hunter☆50Mar 29, 2026Updated 7 months ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,639Oct 28, 2026Updated last week
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆459Apr 30, 2026Updated 6 months ago
- ☆268Dec 10, 2025Updated 10 months ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆276Mar 28, 2026Updated 7 months ago
- A resources for who want to learn and get deep into client-side bugs☆562Dec 8, 2024Updated last year
- ☆77May 5, 2025Updated last year
- bash script for automating subdomain enumeration process either passive or active☆31Feb 24, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python/Bash automation customization script designed to automate the reconnaissance process☆19Jan 28, 2024Updated 2 years ago
- AI-powered ffuf wrapper☆813Dec 4, 2025Updated 11 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- ☆205Jan 22, 2026Updated 9 months ago
- ☆28Apr 12, 2026Updated 6 months ago
- Subdomain Enumerator and Simple Crawler☆456Sep 4, 2026Updated 2 months ago
- Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.☆1,549Aug 14, 2026Updated 2 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- RepShot · Generate professional security finding cards directly from Burp Suite Repeater.☆109May 31, 2026Updated 5 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,568Oct 21, 2026Updated 2 weeks ago
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆70Oct 8, 2026Updated 3 weeks ago
- Monitoring Monster (MonMon) is a monitoring tool for bug bounty hunters. It tracks changes across subdomains, HTTP endpoints, shell com…☆47Apr 7, 2026Updated 7 months ago
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,327Sep 1, 2026Updated 2 months ago
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆765Updated this week
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆290Aug 12, 2026Updated 2 months ago
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Oct 12, 2026Updated 3 weeks ago
- Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter☆61Feb 9, 2026Updated 8 months ago
- ☆31Feb 16, 2026Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆35May 28, 2026Updated 5 months ago
- Templtor is a bash script that will gather all the community Nuclei templates.☆40Dec 19, 2025Updated 10 months ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,659Feb 10, 2024Updated 2 years ago
- Webarchive is a Go package for pentesters and developers to interacting with the Wayback Machine's CDX API and integrate web archive util…☆11Feb 25, 2024Updated 2 years ago
- ⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs☆472Oct 31, 2026Updated last week
- AndroHunter☆478Mar 8, 2026Updated 7 months ago
- ☆1,184Jan 28, 2026Updated 9 months ago