Alternatives and similar repositories for chameleon

Users that are interested in chameleon are comparing it to the libraries listed below

• sw33tLie / sns
  IIS shortname scanner written in Go
  ☆340Updated 2 years ago
• resyncgg / ripgen
  Rust-based high performance domain permutation generator.
  ☆291Updated last year
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆668Updated last year
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆487Updated 3 years ago
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆371Updated 2 years ago
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆317Updated last month
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆195Updated last year
• g0ldencybersec / gungnir
  CT Log Scanner
  ☆390Updated 4 months ago
• xnl-h4ck3r / urless
  De-clutter a list of URLs
  ☆346Updated 9 months ago
• 0xDexter0us / Scavenger
  Burp extension to create target specific and tailored wordlist from burp history.
  ☆245Updated 3 years ago
• trickest / dsieve
  Filter and enrich a list of subdomains by level
  ☆209Updated last year
• bebiksior / EvenBetter
  EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎
  ☆153Updated this week
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆450Updated 3 years ago
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆226Updated 3 years ago
• swoops / eval_villain
  A Firefox Web Extension to improve the discovery of DOM XSS.
  ☆276Updated 9 months ago
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆271Updated last year
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆479Updated this week
• 0xsha / GoLinkFinder
  A fast and minimal JS endpoint extractor
  ☆371Updated 9 months ago
• w9w / JSA
  Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.
  ☆536Updated 5 months ago
• Escape-Technologies / graphql-wordlist
  The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
  ☆383Updated last year
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆360Updated 3 years ago
• hakluke / bug-bounty-standards
  A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way t…
  ☆232Updated 3 years ago
• rs-loves-bugs / xsshunter
  ☆174Updated this week
• hakluke / hakscale
  Distribute ordinary bash commands over many systems
  ☆166Updated 2 years ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆688Updated 4 months ago
• midoxnet / mapperplus
  MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.
  ☆252Updated 10 months ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆383Updated 2 years ago
• sw33tLie / uff
  unleashed ffuf
  ☆221Updated 2 months ago
• dwisiswant0 / ppfuzz
  A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀
  ☆634Updated 2 years ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆568Updated last year