oppsec / Pinkerton

Related projects ⓘ

Alternatives and complementary repositories for Pinkerton

• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆378Updated last year
• SeifElsallamy / Blind-XSS-Manager
  Never forget where you inject.
  ☆211Updated last year
• trickest / mkpath
  Make URL path combinations using a wordlist
  ☆173Updated last year
• AggressiveUser / AllForOne
  AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,
  ☆563Updated 8 months ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆428Updated 2 years ago
• SAPT01 / HBSQLI
  Automated Tool for Testing Header Based Blind SQL Injection
  ☆264Updated last year
• RevoltSecurities / Subdominator
  SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
  ☆431Updated last month
• pikpikcu / nodesub
  Nodesub is a command-line tool for finding subdomains in bug bounty programs
  ☆136Updated 3 months ago
• Sn1r / Forbidden-Buster
  A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas i…
  ☆165Updated 2 months ago
• ferreiraklet / Jeeves
  Jeeves SQLI Finder
  ☆216Updated 2 years ago
• sysdig / wafer
  ☆193Updated 6 months ago
• daffainfo / Oneliner-Bugbounty
  A collection oneliner scripts for bug bounty
  ☆171Updated 8 months ago
• 0xPugal / SubDomz
  An Automated Subdomain Enumeration Tool
  ☆242Updated last month
• ayadim / Nuclei-bug-hunter
  i will upload more templates here to share with the comunity.
  ☆531Updated 7 months ago
• byt3hx / jsleak
  jsleak is a tool to find secret , paths or links in the source code during the recon.
  ☆480Updated last month
• s3c-krd / s3cXSSer
  This extension will help you to detect GET/POST based XSS vulnerability in any website easily
  ☆237Updated last year
• Bandit-HaxUnit / haxunit
  ☆314Updated last month
• anmolksachan / TheTimeMachine
  Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
  ☆267Updated 2 months ago
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆338Updated this week
• Mr-Robert0 / Logsensor
  A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning
  ☆471Updated last year
• volkandindar / agartha
  A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations,…
  ☆354Updated last month
• az7rb / crt.sh
  Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.
  ☆196Updated 2 months ago
• silentsignal / burp-text4shell
  Text4Shell scanner for Burp Suite
  ☆191Updated 2 years ago
• SirBugs / endext
  EndExt is a .go tool for extracting all the possible endpoints from the JS files
  ☆183Updated 4 months ago
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆348Updated 2 years ago
• daffainfo / match-replace-burp
  Useful "Match and Replace" burpsuite rules
  ☆339Updated last year
• Net-hunter121 / API-Wordlist
  ☆235Updated 3 years ago
• projectdiscovery / nuclei-ai-extension
  Nuclei AI - Browser Extension for Rapid Nuclei Template Generation
  ☆448Updated last year
• e1abrador / sub.Monitor
  Self-hosted passive subdomain continous monitoring tool.
  ☆155Updated 9 months ago
• daffainfo / bypass-403
  Go script for bypassing 403 forbidden
  ☆144Updated 3 years ago