Alternatives and similar repositories for SubHound:

Users that are interested in SubHound are comparing it to the libraries listed below

• M359AH / DepFine
  DepFine Is a tool to find the unregistered dependency based on dependency confusion valunerablility and lead to RCE
  ☆26Updated 3 years ago
• smackerdodi / robots-txt-parser.py
  collect robots.txt endpoint for allowed and disallowed endpoints from a list of subdomains
  ☆15Updated 2 years ago
• raoufmaklouf / jsecret
  ☆23Updated 7 months ago
• husseinphp / Get-All-Parameters
  ☆16Updated last year
• R-s0n / Custom_Vuln_Scan_Templates
  A collection of custom built scan templates for automated vuln scanning (nuclei, Burp, etc.)
  ☆37Updated last year
• 0xElkot / My-Nuclei-Templates
  ☆33Updated 2 years ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆50Updated 11 months ago
• Saitle / BugBounty-2.0
  Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.
  ☆25Updated last year
• MaakResearch / Recon
  About Recon Tools,Methodology and writeups
  ☆18Updated last year
• emadshanab / femida
  Automated blind-xss search for Burp Suite
  ☆23Updated 2 years ago
• Micro0x00 / nucleitemp
  get all nuclei temp from emad shanab repo in one run
  ☆33Updated last year
• eslam3kl / ShoLister
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆58Updated 2 years ago
• sys0wn / css-scrollbar-attack
  PoC for leaking text nodes via CSS injection
  ☆17Updated 6 months ago
• AssassinUKG / Nuclei_public_templates
  ☆7Updated last year
• mrxdevil404 / hoOk
  Tool for collect subdomains from different websites but the unique in tool collect subdomains from subdomainfinder.c99 and collect all su…
  ☆26Updated last year
• orwagodfather / SQL-Wordlist
  ☆60Updated 4 months ago
• k4k4r07 / CertSubDumb
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆18Updated 2 years ago
• orwagodfather / ShoLister
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆10Updated 2 years ago
• bug-vs-me / WPML-XSS
  ☆22Updated last year
• doosec101 / swagger_scanner
  This tool checks if the given Url/File has Swagger Ui, That can be tested later..
  ☆35Updated last year
• R-s0n / Clear-Sky
  Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN
  ☆25Updated 3 years ago
• akshaysharma016 / aem-detector
  ☆20Updated last year
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆47Updated 2 years ago
• Asbawy / Automation-for-Juniper-cve-2023-36845
  Simple Automation script for juniper cve-2023-36845
  ☆18Updated last year
• pdelteil / trusty-bbp
  Legitimate bug bounty programs value ethical practices and provide clear rewards to researchers for identifying security flaws
  ☆34Updated 4 months ago
• bhataasim1 / Nuclei-Templates
  Downlaod all the nuclei Templates created from many Bug Hunters
  ☆26Updated last year
• rohsec / BetterBugBounty
  BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!
  ☆29Updated 11 months ago
• wesenu / WAF-bypass-xss-payloads
  XSS payloads for bypassing WAF. This repository is updating continuously.
  ☆10Updated 3 years ago
• bug-vs-me / h1-asset-fetcher
  Tools for bug bounty
  ☆27Updated 11 months ago
• Lu3ky13 / Authorization-Nuclei-Templates
  Authorization-Nuclei-Templates
  ☆38Updated 4 months ago