x8-Burp – Hidden parameters discovery suite wrapper The tool helps to find hidden parameters that can be...
Web Information Gathering
domhttpx domhttpx is a google search engine dorker with an HTTP toolkit built with python, which can make...
inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of...
Javascript security analysis (JSA) Javascript security analysis (JSA) is a program for javascript analysis during web application...
NExfil NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on...
x8: Hidden parameters discovery suite written in Rust The tool helps to find hidden parameters that can...
GitDump GitDump dumps the source code from .git when the directory traversal is disabled Requirements Python3 Tested...
lazyrecon Lazyrecon is a subdomain discovery tool that discovers and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing...
Black-Dragon An Advanced Automation Tool For Web-Recon Developed For Linux Systems. What Is Black Dragon? It’s A...
magicRecon MagicRecon is a powerful shell script to maximize the recon and data collection process of an...
bbscope The ultimate scope gathering tool for HackerOne, Bugcrowd, and Intigriti by sw33tLie. Need to grep all...
puredns puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains...
Crimson Crimson is a tool that automates some of the Pentester or Bug Bounty Hunter tasks. It...
Kiterunner For the longest of times, content discovery has been focused on finding files and folders. While...
nmapAutomator A script that you can run in the background! Summary The main goal for the nmapAutomator...