Alternatives and similar repositories for WebRecon

Users that are interested in WebRecon are comparing it to the libraries listed below

• e1abrador / Burp-headerSnipper
  Burp extension used to snip any header from all the requests.
  ☆23Updated last year
• mqst / gouge
  Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…
  ☆29Updated last year
• 0xElkot / wp-json-extractor
  ☆19Updated 2 years ago
• devanshbatham / realm
  A utility for recursively traversing SSL/TLS certificates for collecting DNS names
  ☆48Updated 2 years ago
• U53RW4R3 / nuclei-fuzzer-templates
  My personal collection of nuclei templates made for fuzzing.
  ☆28Updated last year
• aliyugombe / reflector
  ☆15Updated 2 years ago
• xnl-h4ck3r / auto-repeater
  Automated HTTP Request Repeating With Burp Suite
  ☆40Updated 2 years ago
• aniqfakhrul / lazyParam
  A simple automation tool to detect lfi, rce and ssti vulnerability
  ☆56Updated 3 years ago
• execveat / burp-brief-editor-tab
  Burp Suite extension that makes your life easier by tucking the headers out of the way, so you can see the body content right away withou…
  ☆39Updated last year
• 0xPugal / monitor.sh
  Continuous Reconnaissance and Vulnerability Scanning for Bug Bounties
  ☆18Updated last year
• HernanRodriguez1 / ScanReflectedXSS
  ☆45Updated 2 years ago
• nullenc0de / paramhunter
  Looks for parameters in urls
  ☆34Updated 11 months ago
• mathis2001 / ParamFirstCheck
  ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …
  ☆34Updated last year
• nowak0x01 / PrestaXSRF
  PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…
  ☆31Updated last year
• harisec / orange-confusion-attacks
  Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!
  ☆20Updated last year
• ZephrFish / GoogD0rk
  ☆43Updated 5 months ago
• j3ssie / cdnstrip
  Striping CDN & WAF IPs from a list of IP Addresses
  ☆79Updated 5 months ago
• whalebone7 / FfufMaster
  Run ffuf with the appropriate options to brute-force the directories using the awesome different wordlists.
  ☆24Updated 2 years ago
• spyx / ParamAngler
  ☆27Updated 2 years ago
• trickest / github-logs
  Extracting OSINT Insights from 15TB of GitHub Event Logs
  ☆68Updated 2 years ago
• Sunlight-Rim / SQLbit
  A script for automatize boolean-based blind SQL injections (MVP).
  ☆54Updated 3 years ago
• hahwul / xssmaze
  XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnera…
  ☆29Updated 2 weeks ago
• mux0x / mulef
  your bestfried for finding LinkedIn Employees on github
  ☆16Updated 2 years ago
• matthernet / SubdomainFinder
  Find subdomains by searching public certificate records
  ☆16Updated last year
• Th0h0 / autopoisoner
  Web cache poisoning vulnerability scanner.
  ☆71Updated 3 years ago
• nullenc0de / FFUF-Workflow-Tool
  This tool automates the process of running FFUF (Fuzz Faster U Fool) and post-processing its results to extract valid URLs. It supports b…
  ☆35Updated 11 months ago
• z3dc0ps / BBSSRF
  BBSSRF - Bug Bounty SSRF is a powerful tool to check SSRF OOB connection
  ☆38Updated 2 years ago
• Liodeus / swaggerHole
  A python3 script searching for secret on swaggerhub
  ☆66Updated 3 years ago
• ihebski / db
  Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]
  ☆29Updated 4 years ago
• fyoorer / ffufsee
  Ffuf output browser
  ☆39Updated 2 years ago