Alternatives and similar repositories for recce:

Users that are interested in recce are comparing it to the libraries listed below

• abuvanth / kicks3
  S3 bucket finder from html,js and bucket misconfiguration testing tool
  ☆34Updated 5 years ago
• gwen001 / myrecon.py
  My recon script
  ☆50Updated 5 years ago
• stevemcilwain / secrets
  Offsec Pentest and Bug Bounty Notes
  ☆24Updated 4 years ago
• Damian89 / simple-oob-scanner
  Simple tool to test for SSRF/OOB HTTP Read within the Path of a request
  ☆30Updated 5 years ago
• ethicalhackingplayground / Zin
  A Payload Injector for bugbounties written in go
  ☆70Updated 4 years ago
• YashGoti / gal
  Get all possible href | src | url from target url or domain
  ☆41Updated 4 years ago
• dwisiswant0 / bounty-targets-alert
  It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.
  ☆57Updated 3 years ago
• Naategh / dom-red
  Small script to check a list of domains against open redirect vulnerability
  ☆26Updated 3 years ago
• Sicks3c / Reconizer
  ☆38Updated 4 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆58Updated 3 years ago
• osamahamad / Interesting-Things
  Single-WebApp-Target essentials testing methodology tool starting at recon-information gathering for the juicy stuff ended up in exploita…
  ☆22Updated 3 years ago
• InitRoot / BurpSQLTruncSanner
  Messy BurpSuite plugin for SQL Truncation vulnerabilities.
  ☆63Updated 4 years ago
• devpwn / xmlrpc-scan
  golang tool to scan domains or single domains with know security issues against xmlrpc
  ☆62Updated last year
• ksharinarayanan / bash-hacks
  Handy bash and python scripts for bug bounty hunting!
  ☆47Updated 3 years ago
• cujanovic / Virtual-host-wordlist
  Virtual host wordlist
  ☆51Updated 4 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 3 years ago
• codewatchorg / Burp-AnonymousCloud
  Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities
  ☆44Updated 2 years ago
• 1ndianl33t / 1ndiList
  Recon Custom WordList Ganerator
  ☆57Updated 4 years ago
• ameenmaali / endpointdiff
  Wrapper around LinkFinder to quickly determine whether endpoints have been added/removed to JavaScript files.
  ☆41Updated 5 years ago
• humblelad / Needle
  Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip
  ☆22Updated 4 years ago
• eternyle / ShodanIsh
  Shodan Favicon Hash Generator By Aziz Hakim @eternyle
  ☆25Updated 9 months ago
• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆84Updated 2 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆37Updated 4 years ago
• Sajibekanti / Bug_Bounty_List
  Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.
  ☆31Updated 4 years ago
• inj3ctor-m4 / WebHackingNotes
  RECON Notes taking from every fucking book about bugbounty and web-app penetration testing exists
  ☆20Updated 5 years ago
• samirettali / dumpcn
  Get all the CNs from a list of domains
  ☆46Updated 3 years ago
• emadshanab / 971-MB-content_discovery_wordlist
  Collection of content discovery wordlists in one wordlist.
  ☆38Updated 3 years ago
• TROUBLE-1 / codeza
  This tool will scan all the URL's in the file and will provide Content-Length, Status-Code, Server and more.
  ☆36Updated 3 years ago
• ethicalhackingplayground / linkJS
  ☆56Updated 4 years ago