Alternatives and similar repositories for recon

Users that are interested in recon are comparing it to the libraries listed below

• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆40Updated 4 years ago
• Sambal0x / Recon-tools
  Some of my bug bounty tools
  ☆51Updated 5 years ago
• yourbuddy25 / Hunter
  A small script for my recon during bug hunting. Needs some modifications
  ☆17Updated 5 years ago
• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆85Updated 2 years ago
• AdmiralGaust / bountyReconV2
  Framework to automate Bug Bounty Reconnaissance
  ☆44Updated 4 years ago
• bonino97 / LemonBooster-v2
  Reestructured LemonBooster.
  ☆47Updated 11 months ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 4 years ago
• gwen001 / BBvuln
  A listing of the most common vuln that you can link in your PoCs
  ☆28Updated 6 years ago
• eslam3kl / 3klector
  3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company
  ☆48Updated 2 years ago
• 1ndianl33t / BugBounty_Profile
  Recon_profile
  ☆37Updated 5 years ago
• random-robbie / wheres-my-git
  Wheres My Git - Find /.git/config files based on dirs found in home url
  ☆20Updated 3 years ago
• devanshbatham / awesome-bughunting-oneliners
  A list of Awesome Bughunting oneliners , collected from the various sources
  ☆68Updated last year
• sw33tLie / bcscope
  Get the scope of your bugcrowd programs
  ☆67Updated 4 years ago
• devpwn / xmlrpc-scan
  golang tool to scan domains or single domains with know security issues against xmlrpc
  ☆62Updated last year
• ghsec / ghsec-jaeles-signatures
  Signatures for jaeles scanner by @j3ssie
  ☆116Updated last year
• dwisiswant0 / continuous-nuclei
  Running nuclei Continuously
  ☆56Updated 2 years ago
• Static-Flow / ParameterMiner
  Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…
  ☆48Updated 5 years ago
• ghostlulzhacks / s3brute
  s3 brute force tool
  ☆44Updated 4 years ago
• Sajibekanti / Bug_Bounty_List
  Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.
  ☆31Updated 4 years ago
• Naategh / dom-red
  Small script to check a list of domains against open redirect vulnerability
  ☆28Updated 3 years ago
• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆92Updated last week
• abuvanth / kicks3
  S3 bucket finder from html,js and bucket misconfiguration testing tool
  ☆34Updated 5 years ago
• RogueSMG / Scavenger
  Noobish Recon Automation
  ☆21Updated last year
• xElkomy / Workflow-Bug-Bounty
  My Tools For Bug Bounty
  ☆66Updated 9 months ago
• Tanmay-N / CORS-Scanner
  ☆32Updated 4 years ago
• BugBountyResources / targets
  A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bul…
  ☆99Updated 4 years ago
• Healdb / Elevate
  Horizontal Domain Discovery
  ☆76Updated 2 years ago
• pry0cc / subgen
  A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!
  ☆87Updated 5 years ago
• dwisiswant0 / hinject
  Host Header Injection Checker
  ☆81Updated 3 years ago
• dwisiswant0 / unew
  A tool for append URLs, skipping duplicates/paths & combine parameters.
  ☆121Updated 3 years ago