GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
☆1,584Dec 21, 2025Updated 8 months ago
Alternatives and similar repositories for GooFuzz
Users that are interested in GooFuzz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,739Jun 11, 2026Updated 2 months ago
- bypass-url-parser☆1,137Updated this week
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,061Updated this week
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,589Mar 8, 2026Updated 5 months ago
- An XSS exploitation command-line interface and payload generator.☆1,441Jan 19, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Rockyou for web fuzzing☆3,235Mar 11, 2026Updated 5 months ago
- OSINT power without API key hassle☆1,774Aug 8, 2026Updated 3 weeks ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,047Updated this week
- pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching☆3,389Dec 1, 2025Updated 9 months ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,866Apr 17, 2026Updated 4 months ago
- Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom …☆1,054Aug 18, 2026Updated 2 weeks ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,871Jun 21, 2026Updated 2 months ago
- The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information abo…☆1,745Jul 10, 2025Updated last year
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,166Mar 7, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hidden parameters discovery suite☆2,095Sep 8, 2024Updated last year
- The recursive internet scanner for hackers. 🧡☆10,532Updated this week
- Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more☆3,759Updated this week
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,271Updated this week
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,201Aug 23, 2026Updated last week
- uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or direc…☆862Jun 20, 2022Updated 4 years ago
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application☆5,118Aug 5, 2026Updated 3 weeks ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,669Jun 6, 2022Updated 4 years ago
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,809Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,532Jan 8, 2026Updated 7 months ago
- Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration☆1,264Updated this week
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆3,254May 13, 2023Updated 3 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆5,082Mar 20, 2026Updated 5 months ago
- Wi-Fi Exploitation Framework☆3,213Sep 24, 2025Updated 11 months ago
- Asset inventory of over 800 public bug bounty programs.☆1,604Feb 14, 2025Updated last year
- declutters url lists for crawling/pentesting☆1,589Feb 23, 2025Updated last year
- LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping☆1,585Nov 26, 2024Updated last year
- ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting☆5,051Apr 24, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules…☆6,171Jul 12, 2024Updated 2 years ago
- One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️☆6,729Jul 9, 2026Updated last month
- HTTP parameter discovery suite.☆6,396Feb 20, 2025Updated last year
- All In One Web Recon☆2,957Jun 1, 2026Updated 3 months ago
- Automation for javascript recon in bug bounty.☆1,106Sep 9, 2023Updated 2 years ago
- A curated list of various bug bounty tools☆6,233Updated this week
- Real-world infosec wordlists, updated regularly☆1,793Updated this week