subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains or a single domain. It fetches subdomains from various sources, checks for potential subdomain takeover vulnerabilities, saves findings to a SQLite database, and can notify updates via Discord.
☆53Dec 9, 2024Updated last year
Alternatives and similar repositories for subfalcon
Users that are interested in subfalcon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This script can be used to find html forms in the list of endpoints/urls.☆47Mar 24, 2024Updated 2 years ago
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- ☆67Sep 8, 2025Updated last year
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Apr 9, 2026Updated 6 months ago
- ☆12May 31, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- Go scanner to find web cache poisoning vulnerabilities in a list of URLs☆149Feb 21, 2024Updated 2 years ago
- JSNotify is a Python script designed to monitor JavaScript files in a specified directory for changes. This tool can be used by developer…☆18May 30, 2026Updated 5 months ago
- Mind map for certifcation, vulnerability finding and recon for bug bounty and professional works.☆18Mar 17, 2024Updated 2 years ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- ☆29May 22, 2024Updated 2 years ago
- Custom nuclei templates for bug hunting.....☆26May 30, 2024Updated 2 years ago
- ☆136Sep 24, 2024Updated 2 years ago
- A proof of concept program that pulls and parses security.txt files at mass.☆30May 31, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- ☆28Feb 10, 2026Updated 8 months ago
- vhost scanning☆37Nov 1, 2023Updated 3 years ago
- ☆12Dec 8, 2025Updated 10 months ago
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆948Aug 24, 2023Updated 3 years ago
- Burp extension used to snip any header from all the requests.☆25Nov 12, 2023Updated 2 years ago
- A command-line utility for auditing DNS configuration using Zonemaster API☆33Aug 21, 2023Updated 3 years ago
- Automated tool for domains & subdomains gathering☆192Jan 30, 2026Updated 9 months ago
- in this repo i will write down every writeup about all types of BAC bugs☆12Jul 24, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "d…☆16Dec 22, 2023Updated 2 years ago
- Burp Suite extension that enhances Burp Active Scan by adding template engine specific SSTI payloads.☆28Feb 20, 2024Updated 2 years ago
- bash script for automating subdomain enumeration process either passive or active☆31Feb 24, 2026Updated 8 months ago
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆67Mar 2, 2026Updated 8 months ago
- bypass 4xx☆13May 14, 2021Updated 5 years ago
- ☆15Mar 29, 2024Updated 2 years ago
- ☆22Apr 29, 2025Updated last year
- A standalone collection of widely used technologies with default credentials enabled, which can be utilized for establishing an initial f…☆21Jun 1, 2024Updated 2 years ago
- ☆17Sep 15, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Monitor your target continuously for new subdomains!☆25Mar 18, 2023Updated 3 years ago
- This repo collects nuclei template from 600+ github repos, updates every 6 hours.☆39Feb 17, 2026Updated 8 months ago
- This script Crawl the website and find the urls that contains html forms.☆71Jun 15, 2024Updated 2 years ago
- A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API☆85Jan 24, 2025Updated last year
- An exploit proof of concept for ConnectWise SecureConnect authentication bypass vulnerability.☆13Feb 20, 2024Updated 2 years ago
- A BurpSuite extension for vulnerability Scanning☆31Feb 16, 2024Updated 2 years ago
- This repository stores some of my custom BCheck Scan configurations. Its goal is to identify intriguing elements that warrant further man…☆104Feb 9, 2024Updated 2 years ago