GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
☆1,591Dec 21, 2025Updated 9 months ago
Alternatives and similar repositories for GooFuzz
Users that are interested in GooFuzz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,765Jun 11, 2026Updated 4 months ago
- bypass-url-parser☆1,138Oct 3, 2026Updated last week
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,182Sep 26, 2026Updated 2 weeks ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,595Mar 8, 2026Updated 7 months ago
- An XSS exploitation command-line interface and payload generator.☆1,494Jan 19, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Rockyou for web fuzzing☆3,267Sep 22, 2026Updated 3 weeks ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,078Updated this week
- OSINT power without API key hassle☆1,852Aug 8, 2026Updated 2 months ago
- pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching☆3,404Dec 1, 2025Updated 10 months ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,867Apr 17, 2026Updated 5 months ago
- Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom …☆1,062Updated this week
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,895Jun 21, 2026Updated 3 months ago
- The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information abo…☆1,744Jul 10, 2025Updated last year
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,192Mar 7, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hidden parameters discovery suite☆2,097Sep 8, 2024Updated 2 years ago
- The recursive internet scanner for hackers. 🧡☆10,701Updated this week
- Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more☆3,785Updated this week
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,319Updated this week
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,229Sep 30, 2026Updated 2 weeks ago
- uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or direc…☆865Jun 20, 2022Updated 4 years ago
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application☆5,144Aug 5, 2026Updated 2 months ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,679Jun 6, 2022Updated 4 years ago
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,876Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,537Jan 8, 2026Updated 9 months ago
- Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration☆1,272Oct 2, 2026Updated last week
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆3,257May 13, 2023Updated 3 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆5,122Updated this week
- Wi-Fi Exploitation Framework☆3,224Sep 24, 2025Updated last year
- Asset inventory of over 800 public bug bounty programs.☆1,612Feb 14, 2025Updated last year
- declutters url lists for crawling/pentesting☆1,596Feb 23, 2025Updated last year
- ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting☆5,093Sep 7, 2026Updated last month
- LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping☆1,611Nov 26, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️☆6,780Sep 27, 2026Updated 2 weeks ago
- Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules…☆6,179Jul 12, 2024Updated 2 years ago
- A curated list of various bug bounty tools☆6,317Oct 6, 2026Updated last week
- HTTP parameter discovery suite.☆6,417Feb 20, 2025Updated last year
- All In One Web Recon☆3,025Jun 1, 2026Updated 4 months ago
- Automation for javascript recon in bug bounty.☆1,110Sep 9, 2023Updated 3 years ago
- Real-world infosec wordlists, updated regularly☆1,801Updated this week