Alternatives and similar repositories for chameleon

Users that are interested in chameleon are comparing it to the libraries listed below

• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆368Updated 2 years ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆478Updated 2 years ago
• sw33tLie / sns
  IIS shortname scanner written in Go
  ☆333Updated 2 years ago
• resyncgg / ripgen
  Rust-based high performance domain permutation generator.
  ☆289Updated last year
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆227Updated 2 years ago
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆638Updated last year
• dwisiswant0 / ppfuzz
  A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀
  ☆618Updated 2 years ago
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆291Updated last year
• xnl-h4ck3r / urless
  De-clutter a list of URLs
  ☆340Updated 6 months ago
• 0xDexter0us / Scavenger
  Burp extension to create target specific and tailored wordlist from burp history.
  ☆239Updated 3 years ago
• g0ldencybersec / gungnir
  CT Log Scanner
  ☆362Updated 2 months ago
• swoops / eval_villain
  A Firefox Web Extension to improve the discovery of DOM XSS.
  ☆272Updated 6 months ago
• MindPatch / lorsrf
  Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load
  ☆295Updated 8 months ago
• hakluke / hakscale
  Distribute ordinary bash commands over many systems
  ☆166Updated 2 years ago
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆270Updated last year
• wdahlenburg / interactsh-collaborator
  Burpsuite plugin for Interact.sh
  ☆222Updated 11 months ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆447Updated 3 years ago
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆445Updated 3 weeks ago
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆648Updated last year
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆312Updated 6 months ago
• w9w / JSA
  Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.
  ☆511Updated 2 months ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆382Updated 2 years ago
• xm1k3 / cent
  Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…
  ☆976Updated last month
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆559Updated last year
• rs-loves-bugs / xsshunter
  ☆172Updated 3 months ago
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆192Updated 9 months ago
• sw33tLie / uff
  unleashed ffuf
  ☆199Updated last week
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆384Updated this week
• ameenmaali / urldedupe
  Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations
  ☆364Updated 4 years ago
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆218Updated 2 years ago