URL scanner for recon, vulnerabilities, secrets and more!
☆12Sep 27, 2021Updated 5 years ago
Alternatives and similar repositories for Nemesis
Users that are interested in Nemesis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Crawlex is a powerful Chrome extension designed to assist bug bounty hunters in their work by enabling easy crawling of all possible URLs…☆12May 28, 2023Updated 3 years ago
- Scan any HackerOne program with Nuclei☆13Sep 21, 2021Updated 5 years ago
- Endpoint monitor tool☆21Sep 16, 2020Updated 6 years ago
- Quick tool to create custom wordlists like how fuzzers work☆10Sep 29, 2023Updated 3 years ago
- Reconness Agents Script☆32Jul 25, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- Hidden input parameters finder☆18Jul 10, 2023Updated 3 years ago
- generates unique subdomain names and runs httpx on them☆18Apr 8, 2024Updated 2 years ago
- A path-normalization pentesting tool.☆153Apr 2, 2026Updated 7 months ago
- Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, f…☆14Sep 20, 2021Updated 5 years ago
- BurpSiute - BurpBounty Profiles☆20Feb 10, 2023Updated 3 years ago
- Related subdomains finder☆27May 18, 2022Updated 4 years ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆14Jan 17, 2023Updated 3 years ago
- Yet Another 403 Bypass Tool☆12Feb 19, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- A collection of Burp Suite Lambda Filters ~ Bambdas☆32Oct 1, 2024Updated 2 years ago
- burp extender for fuzzing☆10Aug 10, 2018Updated 8 years ago
- This repository has workflows created for https://github.com/RikunjSindhwad/Task-Ninja☆26Aug 14, 2025Updated last year
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆53Oct 25, 2024Updated 2 years ago
- ☆13Updated this week
- Scanning APK file for URIs, endpoints & secrets.☆46Apr 5, 2021Updated 5 years ago
- ParamChanger is a tool allowing you to replace the parameters of a list of urls by a payload entered as an argument☆13Aug 10, 2022Updated 4 years ago
- Digging into private data through Sonarcloud public projects☆11Sep 13, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Expired domain names by day 2014 (EDNBD) https://cirosantilli.com/cia-2010-covert-communication-websites#expired-domain-trackers☆16Mar 8, 2025Updated last year
- header-fuzz allows you to fuzz any HTTP header with a wordlist and evaluate success or failure based on the returning HTTP status code.☆17Apr 15, 2020Updated 6 years ago
- A Target Tracking , NoteTaking , CheckLists and Data Management GUI App for Bug Hunter's and Pentesters.☆43Jun 19, 2022Updated 4 years ago
- Server prepared for SSRF post exploitation, javascript exploits and open redirect.☆13Jan 4, 2023Updated 3 years ago
- Wounty is a simple web enumeration script that makes use of other popular tools to automate the early stages of recognition in Bug Bounty…☆14Feb 6, 2022Updated 4 years ago
- My recon script☆50Dec 23, 2019Updated 6 years ago
- Regex out URI parameters from backend code, craft URIs to check for reflections or send to local burp proxy☆13Dec 8, 2022Updated 3 years ago
- MacInjector is a tool that lists macOS applications, checks code-signing vulnerabilities, and injects a dynamic library (dylib) into a vu…☆18Oct 8, 2025Updated last year
- An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.☆13Dec 11, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆12Jul 12, 2021Updated 5 years ago
- scripts & notes☆13Nov 4, 2019Updated 6 years ago
- ☆98May 15, 2020Updated 6 years ago
- ☆14Feb 7, 2024Updated 2 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or security researchers find potential security v…☆48Mar 15, 2023Updated 3 years ago
- 10 Reset Password Flaws Based on Web Application Security☆11Oct 19, 2020Updated 6 years ago