Alternatives and similar repositories for Gau-Expose

Users that are interested in Gau-Expose are comparing it to the libraries listed below

• clarkvoss / Nuclei-Templates
  ☆85Updated 3 years ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆54Updated last year
• six2dez / resolvers_reconftw
  Resolvers updated daily for reconftw
  ☆47Updated 2 years ago
• NitinYadav00 / gf-patterns
  Some of the gf patterns which i use
  ☆45Updated 3 years ago
• emadshanab / Blind-XSS-burp-match-and-replace
  ☆29Updated 2 years ago
• emadshanab / femida
  Automated blind-xss search for Burp Suite
  ☆23Updated 3 years ago
• akshaysharma016 / aem-detector
  ☆21Updated 2 years ago
• akshukatkar / bbtools
  basic bbtools , buggy , not recommended to use
  ☆35Updated 11 months ago
• vitorfhc / queryxss
  Tool for testing reflections in the HTTP responses
  ☆60Updated 2 years ago
• panch0r3d / nuclei-templates
  ☆90Updated 4 years ago
• emadshanab / DIR-WORDLISTS
  Some wordlists collected form github to all bug bounty hunters.
  ☆37Updated 4 years ago
• hakluke / hakfindinternaldomains
  Feed it a list of subdomains, it will resolve them and tell you which ones are internal
  ☆93Updated 4 years ago
• vikrantbatra05 / HuntTheBug
  Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…
  ☆54Updated 3 years ago
• clarkvoss / AEM-List
  ☆97Updated 4 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆22Updated 3 years ago
• PatrikFehrenbach / vilicus
  vīlicus is a bug bounty api dashboard
  ☆41Updated 2 years ago
• ph4nt0m-py / login-panel-wordlist
  ☆32Updated 2 years ago
• iustin24 / SSRF
  ☆33Updated 5 years ago
• adrianlarion / pegaxss
  Magic Header Blind Xss tool (deliver blind xss payloads in request headers).
  ☆26Updated 4 years ago
• Lu3ky13 / Authorization-Nuclei-Templates
  Authorization-Nuclei-Templates
  ☆39Updated last year
• ethicalhackingplayground / aem-eye
  A very simple AEM detector written in rust.🦀
  ☆20Updated 2 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• tess-ss / recon-ninja
  Recon-Ninja
  ☆86Updated last year
• 0xElkot / My-Nuclei-Templates
  ☆35Updated 3 years ago
• k4k4r07 / CertSubDumb
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆19Updated 3 years ago
• M359AH / DepFine
  DepFine Is a tool to find the unregistered dependency based on dependency confusion valunerablility and lead to RCE
  ☆27Updated 4 years ago
• emadshanab / Burpsuite-Plugins-Extensions-Arsenal
  ☆42Updated 4 years ago
• BitTheByte / BitMapper
  Burp-suite Extension For finding .map files
  ☆54Updated 2 years ago
• eslam3kl / ShoLister
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆61Updated 3 years ago
• Virdoexhunter / Subenum_deep_subdomain_enumeration
  In this repo, I have created a subdomain enumeration function that grab subdomains in deep.
  ☆23Updated 2 years ago