Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates being issued
☆67Oct 11, 2022Updated 4 years ago
Alternatives and similar repositories for Substr3am
Users that are interested in Substr3am are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A notification script to help with Recon Stuff☆14Jun 8, 2021Updated 5 years ago
- 🗺 Convert nmap XML output to beautiful JSON☆17Mar 17, 2023Updated 3 years ago
- This extension provides a central location for viewing all GraphQL requests/responses within a Burp project. It provides a clean UI that …☆16Feb 24, 2022Updated 4 years ago
- Reestructured LemonBooster.☆47Jul 26, 2024Updated 2 years ago
- Parallelized enumeration tool for red team engagements and bug bounty programs.☆16Mar 31, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆38Dec 2, 2020Updated 5 years ago
- A simple script to check for insecurely exposed git repositories.☆12Mar 17, 2019Updated 7 years ago
- Subvenkon is a subdomain enumerator from Venkon☆22Jun 22, 2020Updated 6 years ago
- 4xxbypass☆64Mar 29, 2021Updated 5 years ago
- Chromium based web crawler that identifies in-scope urls☆13Jun 4, 2023Updated 3 years ago
- Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …☆53Jul 14, 2021Updated 5 years ago
- A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.☆10Apr 8, 2024Updated 2 years ago
- ☆17Feb 4, 2020Updated 6 years ago
- A Web-UI for subdomain enumeration (subfinder)☆55Jun 5, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Customisable and automated HTTP header injection☆298Jun 27, 2024Updated 2 years ago
- #JavascriptRecon #bugbounty☆20Aug 18, 2021Updated 5 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 5 years ago
- 0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover☆57Dec 15, 2020Updated 5 years ago
- A Tool to Extract Open Kibana Instances on Internet and Map them to their Corresponding Organizations for Bug Bounty.☆16Sep 7, 2019Updated 7 years ago
- Get all possible href | src | url from target url or domain☆40Aug 5, 2020Updated 6 years ago
- A simple program to query nmap xml files in the terminal.☆28May 4, 2020Updated 6 years ago
- Command line tool for testing CRLF injection on a list of domains.☆161Apr 14, 2024Updated 2 years ago
- Bug Bounty tool to automate the recon process.☆12Oct 4, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Given a list of domains, you resolve them and get the IP addresses.☆48Mar 2, 2022Updated 4 years ago
- A simple tool to detect wildcards domain based on Amass's wildcards detector.☆63Apr 13, 2021Updated 5 years ago
- Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…☆51Jun 14, 2020Updated 6 years ago
- ☆12Apr 14, 2021Updated 5 years ago
- Create wordlists from source codes files/directories for enumeration☆29Jul 18, 2023Updated 3 years ago
- This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.☆75Nov 5, 2020Updated 5 years ago
- Exploit for CVE-2021-27342 vulnerability (telnet authentication brute-force protection bypass)☆15May 15, 2021Updated 5 years ago
- automated web assets enumeration & scanning [DEPRECATED]☆288Mar 7, 2023Updated 3 years ago
- Extract endpoints from specific Git repository for fuzzing☆23Nov 3, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Nov 10, 2025Updated 11 months ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Scraping creds using Github API and truffleHog☆11Dec 13, 2023Updated 2 years ago
- Push notifications to Slack channel or to custom server based on BurpSuite response conditions.☆17Nov 26, 2020Updated 5 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥☆157Sep 18, 2023Updated 3 years ago
- Path traversal / LFI fuzzer in Go - 66 encoding bypass techniques, response analysis, goroutine concurrency, wordlist support, proxy (Bur…☆16Apr 10, 2026Updated 6 months ago