Advanced Recon tool for Bug Bounty and Pentesting
☆33Oct 22, 2025Updated 8 months ago
Alternatives and similar repositories for NextRecon
Users that are interested in NextRecon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp suite extension that lets you easily copy issues☆17Apr 3, 2026Updated 3 months ago
- ☆22Jan 20, 2026Updated 6 months ago
- Offensive MCP server auditor: detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabil…☆23Mar 12, 2026Updated 4 months ago
- Get 10k subdomains in securitytrails using cookie without apikey.☆41Oct 23, 2025Updated 8 months ago
- DNSint - A comprehensive DNS reconnaissance and OSINT toolkit for domain intelligence gathering and security analysis.☆19Nov 23, 2025Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automated, aggressive reconnaissance engine for Bug Bounty Hunting and Red Teaming. Features hardware auto-scaling, smart recursion, and …☆22Dec 18, 2025Updated 7 months ago
- Repository for tools used for the OSCP☆27Sep 18, 2025Updated 10 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 4 months ago
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆34May 15, 2026Updated 2 months ago
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- Moxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic …☆115Jan 22, 2026Updated 5 months ago
- CEREBRO-RED v2: Advanced LLM Red Team Research Platform with PAIR Algorithm and LLM-as-a-Judge Evaluation☆17Mar 21, 2026Updated 3 months ago
- Simple Chatbot for testing AI Red Team tooling☆17Feb 11, 2025Updated last year
- Golang Cobalt Strike Rest API Client☆19Apr 10, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆40Jun 24, 2026Updated 3 weeks ago
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆26May 27, 2026Updated last month
- ☆33Feb 24, 2026Updated 4 months ago
- Modern WiFi auditing library for ESP32 using advanced 802.11 techniques. Captures WPA/WPA2/WPA3 handshakes via PMKID extraction and CSA …☆91Jun 15, 2026Updated last month
- OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code☆21Dec 11, 2025Updated 7 months ago
- Resources, research, and tools for securing AI systems☆31Aug 11, 2025Updated 11 months ago
- Execute commands across Windows and Linux systems using multiple RCE methods☆95Mar 2, 2026Updated 4 months ago
- 红队API接口Fuzz字典，WEB安全，渗透测试，API，字典☆91Apr 28, 2024Updated 2 years ago
- 一款高效、强大的子域名爬取工具，结合 Google 和 Firefox 浏览器的优势，帮助安全研究者和渗透测试人员快速收集目标域名的子域名信息☆26Sep 2, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆17Apr 16, 2026Updated 3 months ago
- ☆22Jul 7, 2026Updated last week
- ☆24Apr 16, 2019Updated 7 years ago
- ☆20May 17, 2026Updated 2 months ago
- A self-hosted, real-time collaborative workspace for offensive security assessments.☆42Feb 20, 2026Updated 5 months ago
- CVE-2025-60188 Atarim Plugin Exploit☆22Jan 17, 2026Updated 6 months ago
- Stealth hybrid URL mapper☆17May 1, 2026Updated 2 months ago
- COM Windows Persistence Technique☆89Apr 27, 2026Updated 2 months ago
- TheDarkMark is a C2 framework designed to be fast and parallel.☆23Dec 2, 2025Updated 7 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Encrypted command‑and‑control (C2) research framework for cybersecurity education, red team labs, and secure client‑server communication …☆31Mar 15, 2026Updated 4 months ago
- Burp plugin for jxscout☆23May 12, 2025Updated last year
- This tool checks if the given Url/File has Swagger Ui, That can be tested later..☆38May 1, 2023Updated 3 years ago
- ☆24Jun 16, 2019Updated 7 years ago
- CTF-focused password spray wordlist generator. Perfected for OSCP/PNPT/CPTS. Generates realistic seasonal passwords without the bloat of…☆19Jun 9, 2026Updated last month
- A BugBounty playbook covering vulnerability bypasses, payloads, and quick checks for OWASP Top 10 + extras.☆23Sep 29, 2025Updated 9 months ago
- A curated list of common and advanced Cross-Site Scripting (XSS) payloads for penetration testing, bug bounty hunting, and web applicatio…☆19Jun 19, 2025Updated last year