Alternatives and similar repositories for HTTPLoot

Users that are interested in HTTPLoot are comparing it to the libraries listed below

• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆451Updated 3 years ago
• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆357Updated 2 years ago
• hakluke / hakoriginfinder
  Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
  ☆942Updated last year
• hahwul / authz0
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆424Updated last month
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆482Updated this week
• devanshbatham / headerpwn
  A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
  ☆347Updated last year
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆570Updated 2 years ago
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆294Updated 2 years ago
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆660Updated last year
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆324Updated 8 months ago
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆361Updated 3 years ago
• edoardottt / lit-bb-hack-tools
  Little Bug Bounty & Hacking Tools⚔️
  ☆365Updated 10 months ago
• byt3hx / jsleak
  jsleak is a tool to find secret , paths or links in the source code during the recon.
  ☆544Updated 7 months ago
• hueristiq / xurlfind3r
  A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a …
  ☆634Updated last week
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆489Updated 3 years ago
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆227Updated 3 years ago
• 0xInfection / LogMePwn
  A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.
  ☆398Updated 9 months ago
• s0md3v / SubGPT
  Find subdomains with GPT, for free
  ☆349Updated last year
• v4d1 / Dome
  Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search …
  ☆537Updated last year
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆271Updated last year
• projectdiscovery / alterx
  Fast and customizable subdomain wordlist generator using DSL
  ☆853Updated 2 weeks ago
• edoardottt / favirecon
  Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
  ☆221Updated 2 weeks ago
• hakluke / haklistgen
  Turns any junk text into a usable wordlist for brute-forcing.
  ☆224Updated last year
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆373Updated 4 months ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆693Updated 5 months ago
• Bandit-HaxUnit / haxunit
  ☆326Updated last month
• projectdiscovery / pdtm
  ProjectDiscovery's Open Source Tool Manager
  ☆919Updated 2 weeks ago
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆670Updated last year
• mdsecresearch / BurpSuiteSharpener
  ☆522Updated 2 years ago
• zzzteph / sheye
  Opensource assets and vulnerability scanning tool
  ☆184Updated 3 months ago