Alternatives and similar repositories for recon

Users that are interested in recon are comparing it to the libraries listed below

• Sambal0x / Recon-tools
  Some of my bug bounty tools
  ☆51Updated 5 years ago
• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆44Updated 4 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆52Updated 4 years ago
• abuvanth / kicks3
  S3 bucket finder from html,js and bucket misconfiguration testing tool
  ☆34Updated 5 years ago
• lc / DOD-Recon
  Recon for Department of Defense HackerOne program
  ☆45Updated 6 years ago
• devanshbatham / awesome-bughunting-oneliners
  A list of Awesome Bughunting oneliners , collected from the various sources
  ☆68Updated 2 years ago
• ethicalhackingplayground / linkJS
  ☆56Updated 4 years ago
• 1ndianl33t / BugBounty_Profile
  Recon_profile
  ☆37Updated 5 years ago
• yourbuddy25 / Hunter
  A small script for my recon during bug hunting. Needs some modifications
  ☆17Updated 5 years ago
• Static-Flow / ParameterMiner
  Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…
  ☆48Updated 5 years ago
• 1ndianl33t / 1ndiList
  Recon Custom WordList Ganerator
  ☆58Updated 5 years ago
• BugBountyResources / targets
  A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bul…
  ☆99Updated 4 years ago
• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆92Updated last month
• AdmiralGaust / bountyReconV2
  Framework to automate Bug Bounty Reconnaissance
  ☆44Updated 4 years ago
• xElkomy / Workflow-Bug-Bounty
  My Tools For Bug Bounty
  ☆66Updated 11 months ago
• sw33tLie / bcscope
  Get the scope of your bugcrowd programs
  ☆67Updated 4 years ago
• dwisiswant0 / bounty-targets-alert
  It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
  ☆59Updated 3 years ago
• gwen001 / BBvuln
  A listing of the most common vuln that you can link in your PoCs
  ☆28Updated 6 years ago
• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆85Updated 2 years ago
• bonino97 / LemonBooster-v2
  Reestructured LemonBooster.
  ☆47Updated last year
• Virdoexhunter / OneLinerBashrcCommands
  ☆19Updated 5 years ago
• Naategh / dom-red
  Small script to check a list of domains against open redirect vulnerability
  ☆28Updated 3 years ago
• RogueSMG / Scavenger
  Noobish Recon Automation
  ☆21Updated last year
• Healdb / Elevate
  Horizontal Domain Discovery
  ☆76Updated 2 years ago
• darkc0d37 / wordlistsbyNahamsec
  ☆37Updated 5 years ago
• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆48Updated 2 years ago
• war-and-code / akamai-arl-hack
  Script to test open Akamai ARL vulnerability.
  ☆71Updated 4 years ago
• devpwn / xmlrpc-scan
  golang tool to scan domains or single domains with know security issues against xmlrpc
  ☆62Updated last year
• Damian89 / simple-oob-scanner
  Simple tool to test for SSRF/OOB HTTP Read within the Path of a request
  ☆30Updated 6 years ago
• Zarcolio / wwwordlist
  Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quo…
  ☆104Updated last year