A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predefined service fingerprints.
☆43Apr 12, 2026Updated 6 months ago
Alternatives and similar repositories for subhijack
Users that are interested in subhijack are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆20Aug 23, 2026Updated 2 months ago
- High-performance subdomain prober written in Rust. Like httpx, but faster.☆31Oct 9, 2026Updated 3 weeks ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 11 months ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 11 months ago
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆39Jun 18, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆19Aug 23, 2026Updated 2 months ago
- NeXSS is a modern, self-hosted Blind XSS (Cross-Site Scripting) hunter and callback listener built with Next.js. It helps security resear…☆35Jan 14, 2026Updated 9 months ago
- A powerful and efficient Go-based tool for extracting archived URLs from the Wayback Machine with advanced filtering capabilities, rate l…☆13Nov 5, 2025Updated 11 months ago
- ☆32Jun 26, 2026Updated 4 months ago
- XSSRecon is a fast reflected-parameter discovery tool that uses unique numbered payloads to detect input reflection in HTTP responses and…☆61Oct 12, 2026Updated 2 weeks ago
- IP Finder tool, ipfinder collects IP addresses from Shodan search queries.☆17Dec 12, 2025Updated 10 months ago
- Free BugBounty KrazePlanetTraining☆61Dec 17, 2025Updated 10 months ago
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆19Jun 22, 2026Updated 4 months ago
- ☆38Oct 19, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆52Dec 4, 2025Updated 10 months ago
- Claude-native, governed offensive-OSINT & external attack-surface platform for authorized red-team and bug-bounty. Multi-agent recon acro…☆15Sep 12, 2026Updated last month
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆273Mar 28, 2026Updated 7 months ago
- Writeup Template. Feel free to replicate but please give me credit!☆12Nov 7, 2025Updated 11 months ago
- AI exploit simulation and continuous security pipeline for LLM apps and AI agents☆16Mar 16, 2026Updated 7 months ago
- ☆41Oct 21, 2026Updated last week
- ☆18Sep 1, 2025Updated last year
- List of Fresh DNS resolvers updates every 1 hour☆23Updated this week
- ☆13Nov 29, 2025Updated 11 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆52Oct 1, 2025Updated last year
- Nuclei Tamplates for APK☆22Jan 13, 2023Updated 3 years ago
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform …☆41Feb 22, 2026Updated 8 months ago
- High-speed Go email scraper that crawls sites and internal links concurrently to collect email addresses for reconnaissance, research, or…☆35May 31, 2026Updated 4 months ago
- PlayRetrieve is a command-line Python script that allows you to download Android application packages (APKs), including split APKs, direc…☆17May 29, 2025Updated last year
- ☆16Oct 12, 2025Updated last year
- ☆52Apr 30, 2026Updated 6 months ago
- This repo collects nuclei template from 600+ github repos, updates every 6 hours.☆39Feb 17, 2026Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- HaXder is an advanced, asynchronous reconnaissance framework for security researchers. Discover subdomains, map attack surfaces, fingerpr…☆50Jul 1, 2026Updated 3 months ago
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcro…☆104Updated this week
- Mass Hunting & Exploitation PoC for CVE-2025-55182 & CVE-2025-66478☆37Dec 7, 2025Updated 10 months ago
- Subdomain enumeration & reconnaissance framework for bug bounty and pentesting — 20+ tools & APIs, HTTP fingerprinting, port scanning, an…☆28Aug 8, 2026Updated 2 months ago
- P-BitM is a containerized platform for controlled and weaponized Browser-in-the-Middle☆43Oct 18, 2026Updated last week
- Webarchive is a Go package for pentesters and developers to interacting with the Wayback Machine's CDX API and integrate web archive util…☆11Feb 25, 2024Updated 2 years ago
- Javascript sourcemaps enumeration tool☆17Dec 19, 2024Updated last year