Alternatives and similar repositories for website-passive-reconnaissance

Users that are interested in website-passive-reconnaissance are comparing it to the libraries listed below

• MantisSTS / GoCloud
  Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare
  ☆59Updated 2 years ago
• luisfontes19 / CSRFER
  Tool to generate csrf payloads based on vulnerable requests
  ☆64Updated 4 years ago
• Liodeus / swaggerHole
  A python3 script searching for secret on swaggerhub
  ☆68Updated 3 years ago
• emadshanab / Subdomains-brutforce-wordlists-collection
  ☆38Updated 4 years ago
• redhuntlabs / Log4JHunt
  An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
  ☆44Updated 7 months ago
• carlospolop / Pastos
  ☆56Updated 2 years ago
• trickest / safe-harbour
  security.txt collection of most popular world-wide domains
  ☆54Updated last year
• redhuntlabs / Hunt4Spring
  A "Spring4Shell" vulnerability scanner.
  ☆49Updated 7 months ago
• 0xAkashsky / sub-scout
  Simple bash Script to automate initial recon using (httpx, puredns, regulator, wayback, katana, aquatone)
  ☆34Updated 4 months ago
• KathanP19 / waybackfetch
  Tool for fetching all the available waybackmachine snapshot urls
  ☆24Updated 10 months ago
• trickest / recon-and-vulnerability-scanner-template
  Create your own recon & vulnerability scanner with Trickest and GitHub
  ☆49Updated last year
• hakluke / dnstrace
  DNS resolution tracing tool
  ☆34Updated 4 years ago
• A3h1nt / Subcert
  Subcert is a subdomain enumeration tool, that finds all the subdomains from certificate transparency logs.
  ☆81Updated 4 years ago
• R0X4R / snetra
  A Python based scanner uses shodan-internetdb to scan the IP.
  ☆31Updated 3 years ago
• geeknik / nuclei-template-generator
  A simple tool which makes creating nuclei templates even easier.
  ☆37Updated last year
• kankburhan / gampung
  Gampung tools for find nuclei template from github
  ☆10Updated last year
• gwen001 / favicon-hashtrick
  Python script implementing the favicon hash trick to find subdomains.
  ☆37Updated 2 years ago
• ztgrace / mole
  Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.
  ☆58Updated 5 years ago
• ihebski / db
  Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]
  ☆29Updated 4 years ago
• mux0x / mulef
  your bestfried for finding LinkedIn Employees on github
  ☆16Updated 2 years ago
• Orange-Cyberdefense / versionshaker
  Find the remote website version based on a git repository
  ☆125Updated 4 years ago
• OdinF13 / Bug-Bounty-Scripts
  Script for Bug Bounty
  ☆29Updated 3 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆59Updated 3 years ago
• daffainfo / my-nuclei-templates
  Some contributions in the nuclei-templates repository
  ☆58Updated 3 years ago
• hahwul / gitls
  🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline
  ☆59Updated 9 months ago
• koaj / aws-s3-bucket-wordlist
  Most common AWS S3 bucket names.
  ☆27Updated 5 years ago
• haqqibrahim / Sling-Shot-R3con
  🚀 Sling Shot R3con: Automate Your Bug Bounty and Pentest Reconnaissance with Project Discovery tools 🎯
  ☆25Updated last year
• 0xPugal / bugbounty_profile
  Automate bug bounty recon using bash alias
  ☆14Updated last year
• sec-it / BFAC-Burp-Extension
  Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications)
  ☆20Updated 4 years ago