Alternatives and similar repositories for bash-hacks

Users that are interested in bash-hacks are comparing it to the libraries listed below

• al-madjus / recon_scripts

  View on GitHub
  Recon scripts for bug hunting
  ☆10Nov 19, 2021Updated 4 years ago
• ksharinarayanan / WAP

  View on GitHub
  Open source alternative to Burpsuite
  ☆15May 18, 2021Updated 4 years ago
• ameenmaali / endpointdiff

  View on GitHub
  Wrapper around LinkFinder to quickly determine whether endpoints have been added/removed to JavaScript files.
  ☆41Dec 27, 2019Updated 6 years ago
• ksharinarayanan / SourceWolf

  View on GitHub
  Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥
  ☆156Sep 18, 2023Updated 2 years ago
• momenbasel / pyrobots

  View on GitHub
  a tool that gets all paths at robots.txt and opens it in the browser.
  ☆14Aug 2, 2019Updated 6 years ago
• thelikes / fuzzmost

  View on GitHub
  all manner of wordlists
  ☆24Jan 19, 2022Updated 4 years ago
• febinrev / quester

  View on GitHub
  QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.
  ☆15Aug 2, 2021Updated 4 years ago
• xplo1t-sec / scopy

  View on GitHub
  Filter URLs that match your scope file for bugbounty.
  ☆11May 23, 2023Updated 2 years ago
• notmarshmllow / credax

  View on GitHub
  Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.
  ☆10Oct 14, 2021Updated 4 years ago
• Phoenix1112 / ParamReplace

  View on GitHub
  ☆11May 15, 2020Updated 5 years ago
• Mad-robot / Recon-Style

  View on GitHub
  ☆12Apr 14, 2021Updated 4 years ago
• evi1ox / shell_command

  View on GitHub
  ☆15Jul 5, 2020Updated 5 years ago
• maverickNerd / BugForaging

  View on GitHub
  This repo includes my analysis of some public reports.
  ☆55Sep 22, 2020Updated 5 years ago
• allyomalley / pentest_scripts

  View on GitHub
  Various pentesting scripts, focusing on iOS and network security
  ☆14Oct 31, 2019Updated 6 years ago
• wdahlenburg / CVESearch

  View on GitHub
  Query various sources for CVE proof-of-concepts
  ☆53Jun 1, 2023Updated 2 years ago
• melbadry9 / ScanApi

  View on GitHub
  Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.
  ☆40Nov 21, 2025Updated 2 months ago
• engali94 / Twitter-Account-Analyzer

  View on GitHub
  Using various Python libraries such as Pandas, tweetPy, JSON ans matplotLib to take a sneak peek on your Twitter account using Google Col…
  ☆12Aug 25, 2020Updated 5 years ago
• dumorewithcode / purl

  View on GitHub
  ☆38Aug 27, 2022Updated 3 years ago
• i5nipe / android-scripts

  View on GitHub
  Some simple scripts that I use during bug bounty hunting in Android Apps
  ☆28Jan 30, 2025Updated last year
• nagarajcruze / cruze-the-web

  View on GitHub
  a simple script to do basic to advanced recon.... in simple words -> a script to automate all the lazy recon flow of the hunter with the …
  ☆46Sep 7, 2022Updated 3 years ago
• six2dez / degoogle_hunter

  View on GitHub
  Simple fork from degoogle original project with bug hunting purposes
  ☆91Jun 15, 2022Updated 3 years ago
• osamahamad / Sensitive-Data-Exposures-with-Github

  View on GitHub
  Techniques / Tips and tricks for finding sensitive data exposures in Github for Penetration Testers / Bug Bounty Hunters
  ☆17Aug 1, 2020Updated 5 years ago
• devl00p / tekover

  View on GitHub
  Subdomain takeover scanner using Python asyncio
  ☆18Oct 24, 2022Updated 3 years ago
• victoni / Bug-Bounty-Scripts

  View on GitHub
  The scripts I write to help me on my bug bounty hunting
  ☆123Jan 8, 2022Updated 4 years ago
• emadshanab / Huge_DIR_wordlist

  View on GitHub
  ☆48Feb 21, 2021Updated 4 years ago
• Knowledge-Wisdom-Understanding / recon

  View on GitHub
  Enumerate a target Based off of Nmap Results
  ☆76Oct 25, 2023Updated 2 years ago
• AdmiralGaust / bountyRecon

  View on GitHub
  Bash script to automate Bug Bounty Reconnaissance
  ☆45Jan 3, 2021Updated 5 years ago
• venom26 / recon

  View on GitHub
  information gathering
  ☆281Jul 12, 2025Updated 7 months ago
• 0xbigshaq / hackmegraph

  View on GitHub
  a vulnerable GraphQL application
  ☆20Dec 13, 2019Updated 6 years ago
• thelikes / fuzznav

  View on GitHub
  parse ffuf & map endpoints to wordlists
  ☆21Feb 25, 2021Updated 4 years ago
• gwen001 / myrecon.py

  View on GitHub
  My recon script
  ☆50Dec 23, 2019Updated 6 years ago
• z3dc0ps / 0x0p1n3r

  View on GitHub
  0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover
  ☆57Dec 15, 2020Updated 5 years ago
• enciphers-team / WebHacking-Training-Resources

  View on GitHub
  This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.
  ☆21Sep 14, 2023Updated 2 years ago
• Droidzzzio / EnumerationList

  View on GitHub
  This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path
  ☆107Aug 4, 2020Updated 5 years ago
• robre / scripthunter

  View on GitHub
  Tool to find JavaScript files on Websites
  ☆526Nov 2, 2023Updated 2 years ago
• Dheerajmadhukar / karma_v1

  View on GitHub
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Sep 6, 2021Updated 4 years ago
• 0xdekster / deksterecon

  View on GitHub
  Web Application recon automation
  ☆125Dec 18, 2020Updated 5 years ago
• junnlikestea / bulkssrf

  View on GitHub
  Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.
  ☆37Jul 7, 2020Updated 5 years ago
• vsec7 / Command-Collections

  View on GitHub
  Simple command shell collections
  ☆35Mar 7, 2021Updated 4 years ago