michelin / ChopChopLinks
ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.
☆713Updated 2 years ago
Alternatives and similar repositories for ChopChop
Users that are interested in ChopChop are comparing it to the libraries listed below
Sorting:
- Awesome cloud enumerator☆1,080Updated 9 months ago
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆490Updated 2 years ago
- Cloudlist is a tool for listing Assets from multiple Cloud Providers.☆990Updated last week
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆270Updated 2 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆425Updated last month
- A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.☆397Updated last year
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆773Updated last year
- NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.☆401Updated 4 years ago
- Organize your API security assessment by using MindAPI. It's free and open for community collaboration.☆857Updated 3 months ago
- VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, i…☆544Updated last month
- Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.☆447Updated last year
- Scan only once by IP address and reduce scan times with Nmap for large amounts of data.☆393Updated 5 months ago
- Private key usage verification☆432Updated 9 months ago
- Golang client for querying SecurityTrails API data☆575Updated 2 years ago
- ☆419Updated 4 years ago
- A rapid API for the Project Sonar dataset☆656Updated 2 years ago
- Convolutional neural network for analyzing pentest screenshots☆1,275Updated last year
- Go client to communicate with Chaos DB API.☆810Updated 2 weeks ago
- Takes a list of URLs and returns their HTTP response codes☆401Updated 2 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆972Updated last year
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆768Updated 3 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆550Updated 2 years ago
- PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.☆322Updated last year
- A tool to hunt for credentials in github wild AKA git*hunt☆297Updated 3 years ago
- Subdomain finder☆372Updated last year
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆640Updated 5 months ago
- Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists☆764Updated 2 years ago
- Scrape domain names from SSL certificates of arbitrary hosts☆690Updated last year
- Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.☆718Updated last year
- Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.☆1,382Updated last month