Alternatives and similar repositories for recon.sh

Users that are interested in recon.sh are comparing it to the libraries listed below

• 003random / 003Recon

  View on GitHub
  Some tools to automate recon - 003random
  ☆294Jun 5, 2018Updated 7 years ago
• jobertabma / ground-control

  View on GitHub
  A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.
  ☆550Jun 12, 2017Updated 8 years ago
• jobertabma / virtual-host-discovery

  View on GitHub
  A script to enumerate virtual hosts on a server.
  ☆691Dec 28, 2017Updated 8 years ago
• tomdev / teh_s3_bucketeers

  View on GitHub
  ☆276Oct 19, 2021Updated 4 years ago
• anshumanbh / brutesubs

  View on GitHub
  An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker …
  ☆260Aug 22, 2021Updated 4 years ago
• avlidienbrunn / bountydash

  View on GitHub
  BountyDash is a tool to combine your rewards from all platforms, giving you insights about your progress and bug hunting patterns.
  ☆162Apr 24, 2025Updated 9 months ago
• fransr / bountyplz

  View on GitHub
  Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
  ☆459May 10, 2019Updated 6 years ago
• jobertabma / relative-url-extractor

  View on GitHub
  A small tool that extracts relative URLs from a file.
  ☆767Sep 23, 2020Updated 5 years ago
• ReconJSON / ReconJSON

  View on GitHub
  ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.
  ☆104Feb 11, 2019Updated 7 years ago
• EdOverflow / megplus

  View on GitHub
  Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
  ☆305Oct 14, 2018Updated 7 years ago
• appsecco / bugcrowd-levelup-subdomain-enumeration

  View on GitHub
  This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtu…
  ☆632Feb 5, 2019Updated 7 years ago
• zseano / JS-Scan

  View on GitHub
  a .js scanner, built in php. designed to scrape urls and other info
  ☆226Aug 22, 2017Updated 8 years ago
• nahamsec / lazyrecon

  View on GitHub
  This script is intended to automate your reconnaissance process in an organized fashion
  ☆2,007Aug 19, 2021Updated 4 years ago
• maK- / parameth

  View on GitHub
  This tool can be used to brute discover GET and POST parameters
  ☆1,390Aug 24, 2019Updated 6 years ago
• nccgroup / Decoder-Improved

  View on GitHub
  Improved decoder for Burp Suite
  ☆138Aug 30, 2021Updated 4 years ago
• nashcontrol / bounty-monitor

  View on GitHub
  Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …
  ☆224Dec 7, 2022Updated 3 years ago
• gwen001 / actarus

  View on GitHub
  Actarus is a custom tool for bug bounty
  ☆77Nov 14, 2019Updated 6 years ago
• smiegles / mass3

  View on GitHub
  ☆128Sep 2, 2019Updated 6 years ago
• pathetiq / BurpSmartBuster

  View on GitHub
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆378Oct 12, 2020Updated 5 years ago
• zseano / InputScanner

  View on GitHub
  ☆250Jun 6, 2018Updated 7 years ago
• anshumanbh / git-all-secrets

  View on GitHub
  A tool to capture all the git secrets by leveraging multiple open source git searching tools
  ☆1,143Jun 25, 2019Updated 6 years ago
• x1mdev / ReconPi

  View on GitHub
  ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
  ☆728May 6, 2022Updated 3 years ago
• nahamsec / JSParser

  View on GitHub
  ☆835Nov 13, 2023Updated 2 years ago
• federicodotta / HandyCollaborator

  View on GitHub
  Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!
  ☆104Jun 1, 2018Updated 7 years ago
• dxa4481 / cssInjection

  View on GitHub
  Stealing CSRF tokens with CSS injection (without iFrames)
  ☆323Feb 7, 2018Updated 8 years ago
• bayotop / sink-logger

  View on GitHub
  Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.
  ☆49Jul 20, 2022Updated 3 years ago
• infosec-au / altdns

  View on GitHub
  Generates permutations, alterations and mutations of subdomains and then resolves them
  ☆2,468Jan 9, 2025Updated last year
• fransr / bountytpl

  View on GitHub
  bountytpl – template generator cli. By using a template similar to the ones for Template Generator (https://github.com/fransr/template-ge…
  ☆48Aug 5, 2019Updated 6 years ago
• jhaddix / domain

  View on GitHub
  Setup script for Regon-ng
  ☆936Nov 17, 2020Updated 5 years ago
• mazen160 / bfac

  View on GitHub
  BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source c…
  ☆562Aug 25, 2022Updated 3 years ago
• EdOverflow / hacks

  View on GitHub
  Some random scripts. Just trying to be like the cool kids.
  ☆101Jul 1, 2018Updated 7 years ago
• TypeError / domained

  View on GitHub
  Multi Tool Subdomain Enumeration
  ☆724Apr 11, 2021Updated 4 years ago
• nahamsec / lazys3

  View on GitHub
  ☆625Feb 1, 2024Updated 2 years ago
• anshumanbh / tko-subs

  View on GitHub
  A tool that can help detect and takeover subdomains with dead DNS records
  ☆773Jan 3, 2021Updated 5 years ago
• VirtueSecurity / aws-extender

  View on GitHub
  AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.
  ☆256Feb 23, 2022Updated 3 years ago
• lc / secretz

  View on GitHub
  secretz, minimizing the large attack surface of Travis CI
  ☆325May 30, 2022Updated 3 years ago
• EdOverflow / curate

  View on GitHub
  A tool for fetching archived URLs (to be rewritten in Go).
  ☆41Jul 19, 2018Updated 7 years ago
• bugcrowd / HUNT

  View on GitHub
  ☆2,315Dec 8, 2023Updated 2 years ago
• PortSwigger / hackability

  View on GitHub
  Probe a rendering engine for vulnerabilities and other features
  ☆367Oct 13, 2021Updated 4 years ago