Alternatives and similar repositories for cth_wordlists

Users that are interested in cth_wordlists are comparing it to the libraries listed below

• Drayko / Bot-Bounty
  Python Script for Telegram Bot is specially built for pentest & bug bounty. It's like a telegram shell.
  ☆57Updated 9 months ago
• R0X4R / Agnee
  Find sensitive information using dorks from different search-engines.
  ☆92Updated last year
• sdnv0x4d / rasoff
  1C RAS Offensive Security Tool
  ☆28Updated 2 years ago
• sharsi1 / sublazerwlst
  Bundle of wordlists for brute-forcing subdomains (World + RUSSIA based).
  ☆67Updated 7 years ago
• Alaa-abdulridha / SerpScan
  Serpscan is a powerfull php script designed to allow you to leverage the power of dorking straight from the comfort of your command line.
  ☆69Updated 4 years ago
• 0xAwali / WebSocketChecker
  Burp suite extension to find sensitive information by checking incoming text OR binary websocket messages
  ☆55Updated last year
• six2dez / degoogle_hunter
  Simple fork from degoogle original project with bug hunting purposes
  ☆91Updated 3 years ago
• SeifElsallamy / gip
  Google IP Search Engine
  ☆164Updated 3 years ago
• aniqfakhrul / lazyParam
  A simple automation tool to detect lfi, rce and ssti vulnerability
  ☆56Updated 3 years ago
• kleiton0x00 / CORS-one-liner
  A one liner Bash command which finds CORS in every possible endpoint.
  ☆149Updated 5 years ago
• sorokinpf / sqli_blinder
  Framework for blind boolean-based sql injections exploatation. Use it if sqlmap does shit.
  ☆29Updated 3 years ago
• shiblisec / Kyubi
  A tool to discover and exploit Nginx alias traversal misconfiguration, the tool can bruteforce the URL path recursively to find out hidde…
  ☆129Updated 2 years ago
• nullenc0de / reverse-apk
  ☆54Updated last year
• luisfontes19 / CSRFER
  Tool to generate csrf payloads based on vulnerable requests
  ☆64Updated 5 years ago
• carlospolop / Pastos
  ☆58Updated 3 years ago
• moeinfatehi / Backup-Finder
  A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CON…
  ☆163Updated last year
• Proviesec / github-dorks
  Useful Github Dorks for BugBounty -
  ☆68Updated 3 years ago
• enenumxela / subdomains.sh
  A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.
  ☆79Updated 3 years ago
• ambalabanov / cswsh-scanner
  Scanner for Cross-Site WebSocket Hijacking
  ☆42Updated 5 years ago
• AlecBlance / S3BucketList
  Chrome and Firefox extension that lists Amazon S3 Buckets while browsing
  ☆129Updated 5 months ago
• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆86Updated 3 years ago
• incogbyte / quickpress
  Small tool to automate SSRF wordpress and XMLRPC finder
  ☆82Updated 3 years ago
• redhuntlabs / Log4JHunt
  An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
  ☆45Updated last year
• MantisSTS / GoCloud
  Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare
  ☆59Updated 3 years ago
• s4hm4d / shodanidb
  Fetch data (open ports, CVEs, CPEs, ...) from shodan internetDB API
  ☆92Updated 3 years ago
• mathis2001 / ParamFirstCheck
  ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …
  ☆34Updated 2 years ago
• nico989 / B1pass3r
  Python tool to test known techniques to bypass 403 and 401 HTTP responses.
  ☆36Updated 2 years ago
• U53RW4R3 / nuclei-fuzzer-templates
  My personal collection of nuclei templates made for fuzzing.
  ☆29Updated last year
• ethicalhackingplayground / dorkX
  Pipe different tools with google dork Scanner
  ☆56Updated 5 years ago
• trickest / safe-harbour
  security.txt collection of most popular world-wide domains
  ☆54Updated 2 years ago