iamnihal / warf
WARF is a Web Application Reconnaissance Framework that helps to gather information about the target.
☆191Updated 2 years ago
Alternatives and similar repositories for warf:
Users that are interested in warf are comparing it to the libraries listed below
- Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using…☆150Updated last year
- Welcome to the Bug Hunter's Wordlists repository! 🐛🔍 This repository serves as a comprehensive collection of essential wordlists utiliz…☆146Updated 10 months ago
- Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not☆283Updated 6 months ago
- LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and e…☆350Updated last year
- "XSS automation tool helps hackers identify and exploit cross-site scripting vulnerabilities in web apps. Tests for reflected and persist…☆92Updated 8 months ago
- This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filt…☆213Updated 7 months ago
- Checks for SSRF using built-in custom Payloads after fetching URLs from Multiple Passive Sources & applying complex patterns aimed at SSR…☆121Updated 6 months ago
- All About Web Recon & OSINT☆119Updated 3 weeks ago
- Shodan Dorks 2023☆231Updated 2 months ago
- How to search on the shodan.io website☆121Updated 5 years ago
- SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. I…☆146Updated 4 months ago
- AutoRecon-XSS is a script designed for automated reconnaissance of XSS vulnerabilities. It crawls the target URL or alive domains, extrac…☆133Updated last year
- Nodesub is a command-line tool for finding subdomains in bug bounty programs☆148Updated 7 months ago
- Hi everyone,☆59Updated last year
- ☆137Updated 3 years ago
- Wordlists handcrafted (and automated) with ♥☆215Updated 2 weeks ago
- Never forget where you inject.☆228Updated 2 years ago
- My useful files for penetration tests, security assessments, bug bounty and other security related stuff☆160Updated this week
- Web application with vulnerabilities found in real cases, both in pentests and in Bug Bounty programs.☆166Updated last year
- Self-hosted passive subdomain continous monitoring tool.☆160Updated last year
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆381Updated last year
- ☆76Updated 3 years ago
- Collect XSS vulnerable parameters from entire domain.☆150Updated 2 years ago
- Nuclei (https://github.com/projectdiscovery/nuclei) templates for extracting juicy info from web pages☆176Updated last year
- A curated list of cloud pentesting resource, contains AWS, Azure, Google Cloud☆116Updated 2 years ago
- Opensource assets and vulnerability scanning tool☆164Updated 2 months ago
- My small collection of reports templates (This is a fork of orignal repo from https://github.com/gwen001/BB-datas)☆124Updated last year
- Here Are Some Bug Bounty Resource From Twitter☆89Updated 2 months ago
- A repository with informtion related to Cloud Osint☆88Updated 2 months ago
- SetMyKali is a bash based tool to configure and customize kali linux☆69Updated 2 years ago