GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
☆1,580Dec 21, 2025Updated 7 months ago
Alternatives and similar repositories for GooFuzz
Users that are interested in GooFuzz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,695Jun 11, 2026Updated last month
- bypass-url-parser☆1,135Jul 18, 2026Updated last week
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆7,891Jun 29, 2026Updated 3 weeks ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,575Mar 8, 2026Updated 4 months ago
- An XSS exploitation command-line interface and payload generator.☆1,438Jan 19, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Rockyou for web fuzzing☆3,201Mar 11, 2026Updated 4 months ago
- OSINT tools and more but without API key☆1,668Jul 3, 2026Updated 3 weeks ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,022Jul 10, 2026Updated 2 weeks ago
- pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching☆3,371Dec 1, 2025Updated 7 months ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,859Apr 17, 2026Updated 3 months ago
- Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom …☆1,052Updated this week
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,820Jun 21, 2026Updated last month
- The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information abo…☆1,736Jul 10, 2025Updated last year
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,143Mar 7, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Hidden parameters discovery suite☆2,085Sep 8, 2024Updated last year
- The recursive internet scanner for hackers. 🧡☆10,215Updated this week
- Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more☆3,522Jul 15, 2026Updated last week
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,168Updated this week
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,192Updated this week
- uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or direc…☆850Jun 20, 2022Updated 4 years ago
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application☆5,099Dec 21, 2024Updated last year
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,655Jun 6, 2022Updated 4 years ago
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,749Jul 13, 2026Updated last week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,523Jan 8, 2026Updated 6 months ago
- Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration☆1,241Jul 10, 2026Updated 2 weeks ago
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆3,242May 13, 2023Updated 3 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆5,050Mar 20, 2026Updated 4 months ago
- Wi-Fi Exploitation Framework☆3,069Sep 24, 2025Updated 10 months ago
- Asset inventory of over 800 public bug bounty programs.☆1,597Feb 14, 2025Updated last year
- declutters url lists for crawling/pentesting☆1,584Feb 23, 2025Updated last year
- LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping☆1,575Nov 26, 2024Updated last year
- ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting☆4,915Apr 24, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules…☆6,151Jul 12, 2024Updated 2 years ago
- One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️☆6,689Jul 9, 2026Updated 2 weeks ago
- HTTP parameter discovery suite.☆6,364Feb 20, 2025Updated last year
- All In One Web Recon☆2,856Jun 1, 2026Updated last month
- Automation for javascript recon in bug bounty.☆1,102Sep 9, 2023Updated 2 years ago
- A curated list of various bug bounty tools☆6,129Jul 7, 2026Updated 2 weeks ago
- Real-world infosec wordlists, updated regularly☆1,776Updated this week