Alternatives and similar repositories for certainly:

Users that are interested in certainly are comparing it to the libraries listed below

• stolenusername / cowitness
  CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …
  ☆124Updated 11 months ago
• grahamhelton / dredge
  Dredging up secrets from the depths of the file system
  ☆124Updated 4 months ago
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆283Updated 3 months ago
• tjnull / TJ-OPT
  This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used…
  ☆208Updated 3 months ago
• synacktiv / Mindmaps
  Azure mindmap for penetration tests
  ☆179Updated last year
• usdAG / FlowMate
  FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…
  ☆156Updated 4 months ago
• nccgroup / SteppingStones
  A Red Team Activity Hub
  ☆199Updated last week
• dreadnode / burpference
  A research project to add some brrrrrr to Burp
  ☆139Updated last month
• LuemmelSec / PwnDoc-Vulns
  ☆141Updated 4 months ago
• lucsemassa / github_cves_search
  Find CVEs associated to Linux and public exploits on github
  ☆117Updated last year
• g0ldencybersec / CloudRecon
  ☆475Updated 10 months ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆235Updated this week
• cisagov / pen-testing-findings
  A collection of Active Directory, phishing, mobile technology, system, service, web application, and wireless technology weaknesses that …
  ☆241Updated 2 years ago
• prjblk / wordpress-audit-automation
  Scripts to download every Wordpress plugin (updated in the last 2 years) and run Semgrep over the lot of it while storing output in a dat…
  ☆65Updated last month
• expl0itabl3 / check_mdi
  Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.
  ☆192Updated 4 months ago
• Alevsk / rmm
  Recon MindMap (RMM)
  ☆153Updated 9 months ago
• UnaPibaGeek / honeypots-detection
  Nuclei templates for honeypots detection.
  ☆196Updated last year
• DataDog / HASH
  HASH (HTTP Agnostic Software Honeypot)
  ☆137Updated 10 months ago
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆301Updated 4 months ago
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆198Updated 2 years ago
• jhaddix / awsScrape
  A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.
  ☆230Updated last year
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆154Updated 3 months ago
• dub-flow / sessionprobe
  SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…
  ☆446Updated 11 months ago
• nullenc0de / gofuzz
  ☆166Updated 6 months ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆116Updated last week
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆216Updated last week
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆180Updated last week
• ajm4n / adPEAS
  winPEAS, but for Active Directory
  ☆148Updated 4 months ago
• AdnaneKhan / Gato-X
  GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
  ☆255Updated this week
• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆258Updated last week