iustin24 / chameleonView external linksLinks
☆383May 17, 2023Updated 2 years ago
Alternatives and similar repositories for chameleon
Users that are interested in chameleon are comparing it to the libraries listed below
Sorting:
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆1,021Jun 24, 2024Updated last year
- Rust-based high performance domain permutation generator.☆297Dec 2, 2023Updated 2 years ago
- CLI tool that extracts a regex pattern from a list of urls ( Rust )☆61Sep 14, 2022Updated 3 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,038Aug 23, 2025Updated 5 months ago
- Filter and enrich a list of subdomains by level☆210Sep 25, 2023Updated 2 years ago
- Automated learning of regexes for DNS discovery☆389Feb 18, 2023Updated 2 years ago
- Golang tool which helps dropping the irrelevant entries from your ffuf result file.☆141Sep 16, 2024Updated last year
- A path-normalization pentesting tool.☆150Jan 22, 2026Updated 3 weeks ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆975Jan 12, 2024Updated 2 years ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,287Aug 7, 2025Updated 6 months ago
- De-clutter a list of URLs☆384Feb 3, 2026Updated last week
- Hidden parameters discovery suite☆2,015Sep 8, 2024Updated last year
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,515Jan 15, 2026Updated 3 weeks ago
- Chameleon Wordlists☆15Sep 13, 2022Updated 3 years ago
- Real-world infosec wordlists, updated regularly☆1,632Updated this week
- Identify virtual hosts by similarity comparison☆134Aug 12, 2024Updated last year
- An IIS short filename enumeration tool☆1,109Nov 25, 2024Updated last year
- Free, libre, effective, and data-driven wordlists for all!☆645Sep 10, 2021Updated 4 years ago
- Distribute ordinary bash commands over many systems☆168Aug 29, 2022Updated 3 years ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,495Jan 8, 2026Updated last month
- bypass-url-parser☆1,111Feb 7, 2026Updated last week
- Jeeves SQLI Finder☆218May 13, 2022Updated 3 years ago
- Hidden parameters discovery suite☆225Nov 14, 2022Updated 3 years ago
- Scrape domain names from SSL certificates of arbitrary hosts☆689Mar 31, 2024Updated last year
- Rockyou for web fuzzing☆3,014Aug 28, 2025Updated 5 months ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆373Jul 25, 2023Updated 2 years ago
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,533Feb 7, 2026Updated last week
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆560Mar 8, 2025Updated 11 months ago
- Extract JavaScript files from burp suite project with ease.☆97Feb 19, 2022Updated 3 years ago
- declutters url lists for crawling/pentesting☆1,522Feb 23, 2025Updated 11 months ago
- ☆299Jul 16, 2022Updated 3 years ago
- Burp extension to create target specific and tailored wordlist from burp history.☆255Dec 8, 2021Updated 4 years ago
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆382May 19, 2023Updated 2 years ago
- Generate tens of thousands of subdomain combinations in a matter of seconds☆273Sep 25, 2023Updated 2 years ago
- Gotator is a tool to generate DNS wordlists through permutations.☆503Jul 17, 2022Updated 3 years ago
- Unleash the power of cloud☆821Nov 19, 2024Updated last year
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,755May 22, 2024Updated last year
- Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!☆1,262Jan 28, 2026Updated 2 weeks ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆749Dec 19, 2023Updated 2 years ago