GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
☆1,595Dec 21, 2025Updated 10 months ago
Alternatives and similar repositories for GooFuzz
Users that are interested in GooFuzz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,788Jun 11, 2026Updated 4 months ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,332Updated this week
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,102Updated this week
- bypass-url-parser☆1,140Oct 24, 2026Updated last week
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,598Mar 8, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An XSS exploitation command-line interface and payload generator.☆1,498Jan 19, 2025Updated last year
- Rockyou for web fuzzing☆3,285Sep 22, 2026Updated last month
- pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching☆3,414Updated this week
- OSINT power without API key hassle☆1,861Aug 8, 2026Updated 2 months ago
- The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information abo…☆1,748Jul 10, 2025Updated last year
- uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or direc…☆868Jun 20, 2022Updated 4 years ago
- Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom …☆1,070Oct 8, 2026Updated 3 weeks ago
- 403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibrati…☆1,917Updated this week
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,202Mar 7, 2026Updated 7 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,866Apr 17, 2026Updated 6 months ago
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,355Updated this week
- Hidden parameters discovery suite☆2,098Sep 8, 2024Updated 2 years ago
- The recursive internet scanner for hackers. 🧡☆10,971Updated this week
- Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more☆3,808Updated this week
- The fastest dork scanner written in Go.☆1,311Feb 4, 2024Updated 2 years ago
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,915Updated this week
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,232Updated this week
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application☆5,158Aug 5, 2026Updated 3 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Real-world infosec wordlists, updated regularly☆1,804Oct 16, 2026Updated 3 weeks ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,541Jan 8, 2026Updated 9 months ago
- Multi-threaded URL enumeration/content-discovery tool in Python.☆107Feb 15, 2024Updated 2 years ago
- Asset inventory of over 800 public bug bounty programs.☆1,617Feb 14, 2025Updated last year
- declutters url lists for crawling/pentesting☆1,600Feb 23, 2025Updated last year
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,681Jun 6, 2022Updated 4 years ago
- One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️☆6,816Sep 27, 2026Updated last month
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆3,255May 13, 2023Updated 3 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆5,156Oct 12, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules…☆6,190Jul 12, 2024Updated 2 years ago
- A curated list of various bug bounty tools☆6,455Updated this week
- HostHunter a recon tool for discovering hostnames using OSINT techniques.☆1,177Mar 30, 2023Updated 3 years ago
- HTTP parameter discovery suite.☆6,436Feb 20, 2025Updated last year
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆387May 19, 2023Updated 3 years ago
- List of Github repositories and articles with list of dorks for different search engines☆2,785Apr 11, 2025Updated last year
- A collection of awesome one-liner scripts especially for bug bounty tips.☆3,211Jul 29, 2024Updated 2 years ago