Alternatives and similar repositories for Gau-Expose:

Users that are interested in Gau-Expose are comparing it to the libraries listed below

• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆51Updated last year
• six2dez / resolvers_reconftw
  Resolvers updated daily for reconftw
  ☆48Updated 2 years ago
• emadshanab / DIR-WORDLISTS
  Some wordlists collected form github to all bug bounty hunters.
  ☆30Updated 3 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• akshaysharma016 / aem-detector
  ☆20Updated last year
• emadshanab / femida
  Automated blind-xss search for Burp Suite
  ☆23Updated 3 years ago
• NitinYadav00 / gf-patterns
  Some of the gf patterns which i use
  ☆41Updated 3 years ago
• PatrikFehrenbach / vilicus
  vīlicus is a bug bounty api dashboard
  ☆40Updated last year
• Lu3ky13 / Authorization-Nuclei-Templates
  Authorization-Nuclei-Templates
  ☆38Updated 6 months ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆58Updated 3 years ago
• vikrantbatra05 / HuntTheBug
  Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…
  ☆52Updated 3 years ago
• emadshanab / Blind-XSS-burp-match-and-replace
  ☆27Updated last year
• bugbountyhunters / Iris-JS
  #JavascriptRecon #bugbounty
  ☆21Updated 3 years ago
• clarkvoss / Nuclei-Templates
  ☆77Updated 2 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• subzero987 / S3-Recon
  S3 Recon tips and tricks collected from different resources,Sorry if i missed to mention all resources owners
  ☆27Updated 3 years ago
• adrianlarion / pegaxss
  Magic Header Blind Xss tool (deliver blind xss payloads in request headers).
  ☆27Updated 3 years ago
• vitorfhc / queryxss
  Tool for testing reflections in the HTTP responses
  ☆60Updated last year
• clarkvoss / AEM-List
  ☆95Updated 3 years ago
• ph4nt0m-py / login-panel-wordlist
  ☆32Updated 2 years ago
• M359AH / DepFine
  DepFine Is a tool to find the unregistered dependency based on dependency confusion valunerablility and lead to RCE
  ☆28Updated 3 years ago
• akshukatkar / bbtools
  basic bbtools , buggy , not recommended to use
  ☆34Updated 2 months ago
• kursadalsan / fastbugbounty
  Fast Bug Bounty Script
  ☆37Updated 2 months ago
• emadshanab / Adobe-Experience-Manager
  ☆33Updated 3 years ago
• emadshanab / Burpsuite-Plugins-Extensions-Arsenal
  ☆41Updated 3 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆20Updated 2 years ago
• k4k4r07 / CertSubDumb
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆18Updated 2 years ago
• BitTheByte / BitMapper
  Burp-suite Extension For finding .map files
  ☆46Updated last year
• 0xElkot / My-Nuclei-Templates
  ☆33Updated 2 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated last year