Alternatives and similar repositories for chameleon:

Users that are interested in chameleon are comparing it to the libraries listed below

• resyncgg / ripgen
  Rust-based high performance domain permutation generator.
  ☆286Updated last year
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆624Updated last year
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆466Updated 2 years ago
• sw33tLie / sns
  IIS shortname scanner written in Go
  ☆323Updated last year
• xnl-h4ck3r / urless
  De-clutter a list of URLs
  ☆327Updated 3 months ago
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆364Updated 2 years ago
• g0ldencybersec / gungnir
  CT Log Scanner
  ☆317Updated last month
• hakluke / hakscale
  Distribute ordinary bash commands over many systems
  ☆161Updated 2 years ago
• codingo / dorky
  A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon
  ☆234Updated last year
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆438Updated 2 years ago
• w9w / JSA
  Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.
  ☆494Updated this week
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆398Updated this week
• 0xDexter0us / Scavenger
  Burp extension to create target specific and tailored wordlist from burp history.
  ☆237Updated 3 years ago
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆306Updated 3 months ago
• dwisiswant0 / ppfuzz
  A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀
  ☆610Updated last year
• hakluke / bug-bounty-standards
  A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way t…
  ☆229Updated 3 years ago
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆227Updated 2 years ago
• swoops / eval_villain
  A Firefox Web Extension to improve the discovery of DOM XSS.
  ☆270Updated 4 months ago
• g0ldencybersec / CloudRecon
  ☆472Updated 10 months ago
• trickest / dsieve
  Filter and enrich a list of subdomains by level
  ☆200Updated last year
• projectdiscovery / fuzzing-templates
  Community curated list of nuclei templates for finding "unknown" security vulnerabilities.
  ☆59Updated 10 months ago
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆191Updated 7 months ago
• xnl-h4ck3r / knoxnl
  This is a python wrapper around the amazing KNOXSS API by Brute Logic
  ☆247Updated last week
• bebiksior / EvenBetter
  EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎
  ☆140Updated last week
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆283Updated last year
• bitquark / shortscan
  An IIS short filename enumeration tool
  ☆881Updated 3 months ago
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆633Updated 11 months ago
• trufflesecurity / of-CORS
  ☆150Updated last year
• nikitastupin / param-miner-doc
  Unofficial documentation for the great tool Param Miner
  ☆178Updated 2 years ago
• 0x999-x / jsluicepp
  jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
  ☆264Updated 11 months ago