Alternatives and similar repositories for HTTPLoot

Users that are interested in HTTPLoot are comparing it to the libraries listed below

• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆359Updated 2 years ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆453Updated 3 years ago
• hahwul / authz0
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆426Updated last month
• hakluke / hakoriginfinder
  Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
  ☆971Updated 2 years ago
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆500Updated last week
• devanshbatham / headerpwn
  A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
  ☆355Updated 2 years ago
• edoardottt / lit-bb-hack-tools
  Little Bug Bounty & Hacking Tools⚔️
  ☆369Updated last year
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆689Updated last year
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆578Updated last week
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆363Updated 4 years ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆503Updated 3 years ago
• hueristiq / xurlfind3r
  A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a …
  ☆671Updated last month
• byt3hx / jsleak
  jsleak is a tool to find secret , paths or links in the source code during the recon.
  ☆570Updated 4 months ago
• edoardottt / favirecon
  Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
  ☆229Updated 3 weeks ago
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆345Updated last year
• s0md3v / SubGPT
  Find subdomains with GPT, for free
  ☆350Updated last year
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆300Updated 2 years ago
• redhuntlabs / BucketLoot
  BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…
  ☆436Updated last month
• Bandit-HaxUnit / haxunit
  ☆329Updated 6 months ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆381Updated 2 years ago
• v4d1 / Dome
  Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search …
  ☆539Updated last year
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆345Updated last year
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆273Updated 2 years ago
• 0xInfection / LogMePwn
  A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.
  ☆397Updated last year
• hakluke / haklistgen
  Turns any junk text into a usable wordlist for brute-forcing.
  ☆227Updated last year
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆713Updated 2 weeks ago
• trickest / mkpath
  Make URL path combinations using a wordlist
  ☆169Updated 2 years ago
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆229Updated 3 years ago
• zzzteph / sheye
  Opensource assets and vulnerability scanning tool
  ☆186Updated last week
• dwisiswant0 / galer
  A fast tool to fetch URLs from HTML attributes by crawl-in.
  ☆261Updated last year