MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.
☆1,055Jul 23, 2024Updated 2 years ago
Alternatives and similar repositories for magicRecon
Users that are interested in magicRecon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automation Recon tool which works with Large & Medium scopes. It performs a lot of tasks and gets back all the results in separated files…☆684Jul 15, 2024Updated 2 years ago
- An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…☆810May 11, 2026Updated 5 months ago
- Automation for javascript recon in bug bounty.☆1,111Sep 9, 2023Updated 3 years ago
- oneliner commands for bug bounties☆459Jul 25, 2022Updated 4 years ago
- Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hu…☆2,444Jun 27, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens…☆5,576Oct 21, 2026Updated last week
- A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.☆925Nov 19, 2025Updated 11 months ago
- Python tool that probes websites for open redirection via headers, JavaScript, and meta-tag refresh, pulls candidate URLs from the Waybac…☆831Sep 28, 2026Updated last month
- A collection of awesome one-liner scripts especially for bug bounty tips.☆3,208Jul 29, 2024Updated 2 years ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,679Jun 6, 2022Updated 4 years ago
- For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙☆1,851Jun 9, 2024Updated 2 years ago
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆5,342Updated this week
- A fast DOM based XSS vulnerability scanner with simplicity.☆867Sep 30, 2022Updated 4 years ago
- The fastest dork scanner written in Go.☆1,311Feb 4, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Subdomain and target enumeration tool built for offensive security testing☆978Jun 19, 2024Updated 2 years ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,308Sep 26, 2026Updated last month
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,200Mar 7, 2026Updated 7 months ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,051Jun 6, 2026Updated 4 months ago
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects☆965Dec 8, 2021Updated 4 years ago
- A fuzzer for detecting open redirect vulnerabilities☆805Jul 1, 2024Updated 2 years ago
- A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.☆1,908Sep 14, 2026Updated last month
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,782Jun 11, 2026Updated 4 months ago
- All about bug bounty (bypasses, payloads, and etc)☆6,954Sep 8, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,600Mar 8, 2026Updated 7 months ago
- A fast tool to scan CRLF vulnerability written in Go☆1,575Oct 13, 2026Updated 2 weeks ago
- Making Favicon.ico based Recon Great again !☆1,317Aug 29, 2023Updated 3 years ago
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files☆2,544May 26, 2024Updated 2 years ago
- declutters url lists for crawling/pentesting☆1,600Feb 23, 2025Updated last year
- A repository that includes all the important wordlists used while bug hunting.☆1,437Mar 11, 2023Updated 3 years ago
- Rockyou for web fuzzing☆3,283Sep 22, 2026Updated last month
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,460Sep 13, 2024Updated 2 years ago
- ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )☆685Oct 4, 2026Updated 3 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial …☆1,575Jan 29, 2021Updated 5 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆5,151Oct 12, 2026Updated 2 weeks ago
- A tool to check a bunch of URLs that contain reflecting params.☆598Aug 4, 2024Updated 2 years ago
- Collection of methodology and test case for various web vulnerabilities.☆7,380Oct 22, 2026Updated last week
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,365Aug 7, 2026Updated 2 months ago
- R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.☆150Apr 2, 2021Updated 5 years ago
- Subdomain takeover vulnerability checker☆1,609Sep 10, 2024Updated 2 years ago