Alternatives and similar repositories for andor:

Users that are interested in andor are comparing it to the libraries listed below

• ethicalhackingplayground / Zin
  A Payload Injector for bugbounties written in go
  ☆70Updated 4 years ago
• Shivangx01b / BountyIt
  A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it us…
  ☆63Updated 4 years ago
• tismayil / rsdl
  Subdomain Scan With Ping Method.
  ☆46Updated 4 years ago
• dwisiswant0 / hinject
  Host Header Injection Checker
  ☆80Updated 2 years ago
• si9int / Subra
  A Web-UI for subdomain enumeration (subfinder)
  ☆54Updated 4 years ago
• tomnomnom / burl
  A Broken-URL Checker
  ☆79Updated 7 years ago
• incogbyte / quickpress
  Small tool to automate SSRF wordpress and XMLRPC finder
  ☆80Updated 2 years ago
• ethicalhackingplayground / wordlistgen
  Generates target specific word lists for Fuzzing with fuff
  ☆107Updated 4 years ago
• roottusk / xforwardy
  Host Header Injection Scanner
  ☆44Updated 4 years ago
• hakluke / hakq
  A basic golang server/client for distributing tasks over multiple systems.
  ☆38Updated 4 years ago
• vavkamil / XSSwagger
  A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks
  ☆57Updated 5 years ago
• viperbluff / Firebase-Extractor
  A tool written in python for scraping firebase data
  ☆42Updated 4 years ago
• codewatchorg / Burp-AnonymousCloud
  Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities
  ☆44Updated 2 years ago
• cujanovic / Virtual-host-wordlist
  Virtual host wordlist
  ☆51Updated 4 years ago
• nikhil1232 / Bucket-Flaws
  Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations
  ☆57Updated 4 years ago
• thelikes / gwdomains
  sub domain wild card filtering tool
  ☆41Updated 4 years ago
• hahwul / gee
  🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addi…
  ☆82Updated 2 months ago
• hahwul / mzap
  ⚡️ Multiple target ZAP Scanning
  ☆103Updated last year
• InitRoot / BurpSQLTruncSanner
  Messy BurpSuite plugin for SQL Truncation vulnerabilities.
  ☆63Updated 4 years ago
• Droidzzzio / EnumerationList
  This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path
  ☆103Updated 4 years ago
• theblackturtle / wildcheck
  A simple tool to detect wildcards domain based on Amass's wildcards detector.
  ☆62Updated 3 years ago
• ZephrFish / BurpFeed
  Hacked together script for feeding urls into Burp's Sitemap
  ☆93Updated 2 years ago
• random-robbie / ssrf-finder
  Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.
  ☆106Updated 2 years ago
• tdr130 / assetnote
  Push notifications for passive DNS data
  ☆107Updated 8 years ago
• hahwul / ras-fuzzer
  RAS(RAndom Subdomain) Fuzzer
  ☆43Updated 5 years ago
• Josue87 / resolveDomains
  Given a list of domains, you resolve them and get the IP addresses.
  ☆48Updated 2 years ago
• Sambal0x / Recon-tools
  Some of my bug bounty tools
  ☆48Updated 5 years ago
• Quitten / XSSor
  XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…
  ☆49Updated 3 years ago
• war-and-code / akamai-arl-hack
  Script to test open Akamai ARL vulnerability.
  ☆70Updated 3 years ago
• rishuranjanofficial / JWTweak
  Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.
  ☆100Updated last year