melvinsh / unhttpx

Related projects: ⓘ

• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆37Updated 3 years ago
• gwen001 / bxss
  Alternative to XSS Hunter for blind XSS.
  ☆48Updated last year
• emadshanab / Blind-XSS-burp-match-and-replace
  ☆27Updated 9 months ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆45Updated last year
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆17Updated last year
• adrianlarion / pegaxss
  Magic Header Blind Xss tool (deliver blind xss payloads in request headers).
  ☆27Updated 3 years ago
• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆43Updated 3 years ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆46Updated 7 months ago
• akshaysharma016 / aem-detector
  ☆21Updated last year
• rook1337 / hakrawlerx8chain
  ☆14Updated 3 years ago
• r00tkie / grep-pattern
  collection of various grep patterns collected from tomnomnom/gf and other places
  ☆20Updated 3 years ago
• Abdulrahman-Kamel / dpfilter
  ☆23Updated this week
• R0X4R / ssrf-tool
  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.
  ☆43Updated 3 years ago
• eternyle / ShodanIsh
  Shodan Favicon Hash Generator By Aziz Hakim @eternyle
  ☆24Updated 3 months ago
• melbadry9 / cname
  ☆27Updated this week
• Sicks3c / Reconizer
  ☆37Updated 3 years ago
• bp0lr / myGF_patterns
  ☆19Updated 3 years ago
• notmarshmllow / credax
  Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.
  ☆10Updated 2 years ago
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 3 years ago
• evanRubinsteinIT / BugBounty-Oneliners
  ☆24Updated this week
• k4k4r07 / CertSubDumb
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆18Updated 2 years ago
• Sybil-Scan / TLDbrute
  A simple utility to generate domain names with all possible TLDs
  ☆23Updated last year
• emadshanab / DIR-WORDLISTS
  Some wordlists collected form github to all bug bounty hunters.
  ☆27Updated 3 years ago
• leetIbrahim / JSNotify
  ☆18Updated 10 months ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• Sachin-v3rma / hactivity
  A Tool to find subdomains from hackerone reports.
  ☆16Updated 3 years ago
• BitTheByte / BitTraversal
  Burpsuite Plugin to detect Directory Traversal vulnerabilities
  ☆28Updated 3 years ago
• alyrezo / FindBBP
  Bug Bounty Program Discovery tool, that discovers bug Bounty Program via security.txt file by default and you can use custom dork
  ☆15Updated 2 years ago
• darklotuskdb / SSTI-XSS-Finder
  XSS Finder Via SSTI
  ☆54Updated last year
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆58Updated 3 years ago
• 1ndianl33t / 1ndiwordlist
  Bug Bounty Recon wordlist Generator
  ☆21Updated 4 years ago