oppsec / Pinkerton

Related projects ⓘ

Alternatives and complementary repositories for Pinkerton

• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆378Updated last year
• ayadim / Nuclei-bug-hunter
  i will upload more templates here to share with the comunity.
  ☆526Updated 6 months ago
• 0xPugal / SubDomz
  An Automated Subdomain Enumeration Tool
  ☆237Updated 3 weeks ago
• Sn1r / Forbidden-Buster
  A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas i…
  ☆160Updated 2 months ago
• trickest / mkpath
  Make URL path combinations using a wordlist
  ☆172Updated last year
• musana / fuzzuli
  fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
  ☆732Updated last year
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆427Updated 2 years ago
• byt3hx / jsleak
  jsleak is a tool to find secret , paths or links in the source code during the recon.
  ☆477Updated last month
• SeifElsallamy / Blind-XSS-Manager
  Never forget where you inject.
  ☆211Updated last year
• az7rb / crt.sh
  Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.
  ☆196Updated 2 months ago
• SAPT01 / HBSQLI
  Automated Tool for Testing Header Based Blind SQL Injection
  ☆263Updated last year
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆347Updated 2 years ago
• projectdiscovery / fuzzing-templates
  Community curated list of nuclei templates for finding "unknown" security vulnerabilities.
  ☆50Updated 6 months ago
• ferreiraklet / Jeeves
  Jeeves SQLI Finder
  ☆215Updated 2 years ago
• brosck / mantra
  「🔑」A tool used to hunt down API key leaks in JS files and pages
  ☆575Updated 2 months ago
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆219Updated this week
• Net-hunter121 / API-Wordlist
  ☆235Updated 3 years ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆455Updated 2 years ago
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆336Updated this week
• pikpikcu / nodesub
  Nodesub is a command-line tool for finding subdomains in bug bounty programs
  ☆136Updated 3 months ago
• hisxo / JSpector
  A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues
  ☆341Updated last year
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆274Updated last year
• radhasec / xss_payload
  ☆298Updated last year
• ferreiraklet / airixss
  Finding XSS during recon
  ☆248Updated 2 years ago
• Bandit-HaxUnit / haxunit
  ☆313Updated last month
• iamthefrogy / nerdbug
  Full Nuclei automation script with logic explanation.
  ☆236Updated 2 years ago
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆317Updated 9 months ago
• danialhalo / SqliSniper
  Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
  ☆250Updated 7 months ago
• SirBugs / endext
  EndExt is a .go tool for extracting all the possible endpoints from the JS files
  ☆183Updated 3 months ago
• zapstiko / wordlists
  All Type of Payloads
  ☆126Updated 7 months ago