Alternatives and similar repositories for recon

Users that are interested in recon are comparing it to the libraries listed below

• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆38Updated 4 years ago
• Sambal0x / Recon-tools
  Some of my bug bounty tools
  ☆51Updated 5 years ago
• AdmiralGaust / bountyReconV2
  Framework to automate Bug Bounty Reconnaissance
  ☆44Updated 4 years ago
• yourbuddy25 / Hunter
  A small script for my recon during bug hunting. Needs some modifications
  ☆17Updated 5 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 3 years ago
• RogueSMG / Scavenger
  Noobish Recon Automation
  ☆21Updated last year
• sw33tLie / bcscope
  Get the scope of your bugcrowd programs
  ☆67Updated 4 years ago
• gwen001 / BBvuln
  A listing of the most common vuln that you can link in your PoCs
  ☆28Updated 6 years ago
• 1ndianl33t / 1ndiList
  Recon Custom WordList Ganerator
  ☆58Updated 4 years ago
• abuvanth / kicks3
  S3 bucket finder from html,js and bucket misconfiguration testing tool
  ☆34Updated 5 years ago
• Naategh / dom-red
  Small script to check a list of domains against open redirect vulnerability
  ☆28Updated 3 years ago
• emadshanab / Scan-Apple-ASN-for-vulnerabilities-and-leave-no-port
  ☆44Updated 3 years ago
• Damian89 / simple-oob-scanner
  Simple tool to test for SSRF/OOB HTTP Read within the Path of a request
  ☆30Updated 5 years ago
• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆48Updated 2 years ago
• sayaanalam / CORS-EXPLOIT
  ☆38Updated 4 years ago
• Sajibekanti / Bug_Bounty_List
  Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.
  ☆31Updated 4 years ago
• 1ndianl33t / BugBounty_Profile
  Recon_profile
  ☆37Updated 5 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 3 years ago
• vavkamil / XSSwagger
  A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks
  ☆59Updated 5 years ago
• Static-Flow / ParameterMiner
  Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…
  ☆47Updated 4 years ago
• dwisiswant0 / bounty-targets-alert
  It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
  ☆58Updated 3 years ago
• devanshbatham / awesome-bughunting-oneliners
  A list of Awesome Bughunting oneliners , collected from the various sources
  ☆68Updated last year
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• darkc0d37 / wordlistsbyNahamsec
  ☆36Updated 5 years ago
• gwen001 / myrecon.py
  My recon script
  ☆50Updated 5 years ago
• KingOfBugbounty / SecretFinder
  SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
  ☆35Updated 4 years ago
• 1ndianl33t / 1ndiwordlist
  Bug Bounty Recon wordlist Generator
  ☆21Updated 4 years ago
• yesnet0 / bounty
  Misc bounty and vulndisc things
  ☆84Updated 4 years ago
• In3tinct / Taken
  Takeover AWS ips and have a working POC for Subdomain Takeover.
  ☆91Updated 3 months ago
• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆85Updated 2 years ago