Alternatives and similar repositories for HTTPLoot

Users that are interested in HTTPLoot are comparing it to the libraries listed below

• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆358Updated 2 years ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆452Updated 3 years ago
• hahwul / authz0
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆425Updated last week
• hakluke / hakoriginfinder
  Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
  ☆970Updated last year
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆494Updated this week
• devanshbatham / headerpwn
  A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
  ☆354Updated 2 years ago
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆689Updated last year
• edoardottt / lit-bb-hack-tools
  Little Bug Bounty & Hacking Tools⚔️
  ☆368Updated last year
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆363Updated 3 years ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆497Updated 3 years ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆575Updated 2 years ago
• redhuntlabs / BucketLoot
  BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…
  ☆434Updated 3 weeks ago
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆345Updated 11 months ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆714Updated 3 weeks ago
• v4d1 / Dome
  Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search …
  ☆539Updated last year
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆299Updated 2 years ago
• projectdiscovery / alterx
  Fast and customizable subdomain wordlist generator using DSL
  ☆895Updated this week
• byt3hx / jsleak
  jsleak is a tool to find secret , paths or links in the source code during the recon.
  ☆568Updated 2 months ago
• s0md3v / SubGPT
  Find subdomains with GPT, for free
  ☆349Updated last year
• dwisiswant0 / galer
  A fast tool to fetch URLs from HTML attributes by crawl-in.
  ☆261Updated 10 months ago
• projectdiscovery / pdtm
  ProjectDiscovery's Open Source Tool Manager
  ☆1,009Updated 3 weeks ago
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆228Updated 3 years ago
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆342Updated last year
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆382Updated 2 years ago
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆274Updated 2 years ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆397Updated 7 months ago
• hakluke / haklistgen
  Turns any junk text into a usable wordlist for brute-forcing.
  ☆227Updated last year
• projectdiscovery / tlsx
  Fast and configurable TLS grabber focused on TLS based data collection.
  ☆1,041Updated 3 weeks ago
• 0xInfection / LogMePwn
  A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.
  ☆397Updated last year
• edoardottt / favirecon
  Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
  ☆222Updated this week