Alternatives and similar repositories for dora

Users that are interested in dora are comparing it to the libraries listed below

• h33tlit / Jbin-website-secret-scraper
  Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, AP…
  ☆162Updated 2 years ago
• ivan-sincek / forbidden
  Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.
  ☆243Updated 2 months ago
• s0md3v / Parth
  Heuristic Vulnerable Parameter Scanner
  ☆592Updated last year
• punishell / bbtips
  BugBountyTips
  ☆409Updated last month
• s0md3v / ote
  Generate Email, Register for anything, Get the OTP/Link
  ☆589Updated last year
• hueristiq / xurlfind3r
  A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a …
  ☆610Updated 2 weeks ago
• anmolksachan / TheTimeMachine
  Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
  ☆284Updated 8 months ago
• chvancooten / BugBountyScanner
  A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.
  ☆906Updated last month
• Sachin-v3rma / Astra
  Astra is a tool to find URLs and secrets inside a webpage/files
  ☆210Updated 2 years ago
• r0075h3ll / Oralyzer
  Open Redirection Analyzer
  ☆782Updated 2 years ago
• kleiton0x00 / XSScope
  XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.
  ☆315Updated 3 years ago
• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆346Updated last year
• FleexSecurity / fleex
  Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.
  ☆262Updated 9 months ago
• gfek / Lepus
  Subdomain finder
  ☆368Updated 11 months ago
• ayoubfathi / leaky-paths
  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…
  ☆973Updated 11 months ago
• n0kovo / n0kovo_subdomains
  An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.
  ☆647Updated 2 years ago
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆227Updated 2 years ago
• twseptian / oneliner-bugbounty
  oneliner commands for bug bounties
  ☆446Updated 2 years ago
• robre / jsmon
  a javascript change monitoring tool for bugbounties
  ☆648Updated 10 months ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆559Updated last year
• v4d1 / Dome
  Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search …
  ☆533Updated last year
• tasooshi / brutas
  Wordlists handcrafted (and automated) with ♥
  ☆219Updated 2 months ago
• pikpikcu / XRCross
  XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|ID…
  ☆336Updated last year
• Edu4rdSHL / unimap
  Scan only once by IP address and reduce scan times with Nmap for large amounts of data.
  ☆388Updated last month
• laluka / bypass-url-parser
  bypass-url-parser
  ☆1,073Updated this week
• VainlyStrain / Vailyn
  A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
  ☆198Updated 3 years ago
• Dheerajmadhukar / karma_v2
  ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
  ☆856Updated 2 weeks ago
• gokulapap / Reconator
  Automated Recon for Pentesting & Bug Bounty
  ☆420Updated last year
• odomojuli / regextokens
  list of regex patterns for oauth / api tokens with provided source
  ☆263Updated 4 months ago
• m8sec / subscraper
  Subdomain and target enumeration tool built for offensive security testing
  ☆877Updated 11 months ago