Deploy README.md and Categorize Docs
WHW
parent
9f944087ed
commit
bf3360fbe3
14
README.md
14
README.md
|
|
@ -28,7 +28,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
| | Attributes |
|
||||
|-------|---------------------------------------------------|
|
||||
| Types | `Army-Knife` `Proxy` `Recon` `Fuzzer` `Scanner` `Exploit` `Env` `Utils` `Etc`|
|
||||
| Tags | [`infra`](/categorize/tags/infra.md) [`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md) [`pentest`](/categorize/tags/pentest.md) [`subdomains`](/categorize/tags/subdomains.md) [`graphql`](/categorize/tags/graphql.md) [`url`](/categorize/tags/url.md) [`port`](/categorize/tags/port.md) [`dns`](/categorize/tags/dns.md) [`takeover`](/categorize/tags/takeover.md) [`param`](/categorize/tags/param.md) [`domain`](/categorize/tags/domain.md) [`osint`](/categorize/tags/osint.md) [`apk`](/categorize/tags/apk.md) [`js-analysis`](/categorize/tags/js-analysis.md) [`portscan`](/categorize/tags/portscan.md) [`endpoint`](/categorize/tags/endpoint.md) [`online`](/categorize/tags/online.md) [`ssrf`](/categorize/tags/ssrf.md) [`path-traversal`](/categorize/tags/path-traversal.md) [`cache-vuln`](/categorize/tags/cache-vuln.md) [`jwt`](/categorize/tags/jwt.md) [`crlf`](/categorize/tags/crlf.md) [`smuggle`](/categorize/tags/smuggle.md) [`xss`](/categorize/tags/xss.md) [`cors`](/categorize/tags/cors.md) [`aaa`](/categorize/tags/aaa.md) [`s3`](/categorize/tags/s3.md) [`ssl`](/categorize/tags/ssl.md) [`dependency-confusion`](/categorize/tags/dependency-confusion.md) [`oast`](/categorize/tags/oast.md) [`broken-link`](/categorize/tags/broken-link.md) [`sqli`](/categorize/tags/sqli.md) [`exploit`](/categorize/tags/exploit.md) [`403`](/categorize/tags/403.md) [`csp`](/categorize/tags/csp.md) [`RMI`](/categorize/tags/RMI.md) [`rop`](/categorize/tags/rop.md) [`xxe`](/categorize/tags/xxe.md) [`lfi`](/categorize/tags/lfi.md) [`blind-xss`](/categorize/tags/blind-xss.md) [`deserialize`](/categorize/tags/deserialize.md) [`fuzz`](/categorize/tags/fuzz.md) [`http`](/categorize/tags/http.md) [`nuclei-templates`](/categorize/tags/nuclei-templates.md) [`documents`](/categorize/tags/documents.md) [`wordlist`](/categorize/tags/wordlist.md) [`report`](/categorize/tags/report.md) [`notify`](/categorize/tags/notify.md) [`payload`](/categorize/tags/payload.md) [`diff`](/categorize/tags/diff.md) [`cookie`](/categorize/tags/cookie.md) [`clipboard`](/categorize/tags/clipboard.md) [`zipbomb`](/categorize/tags/zipbomb.md) [`web3`](/categorize/tags/web3.md) [`darkmode`](/categorize/tags/darkmode.md) |
|
||||
| Tags | [`infra`](/categorize/tags/infra.md) [`mitmproxy`](/categorize/tags/mitmproxy.md) [`live-audit`](/categorize/tags/live-audit.md) [`crawl`](/categorize/tags/crawl.md) [`pentest`](/categorize/tags/pentest.md) [`subdomains`](/categorize/tags/subdomains.md) [`graphql`](/categorize/tags/graphql.md) [`url`](/categorize/tags/url.md) [`port`](/categorize/tags/port.md) [`dns`](/categorize/tags/dns.md) [`js-analysis`](/categorize/tags/js-analysis.md) [`takeover`](/categorize/tags/takeover.md) [`param`](/categorize/tags/param.md) [`domain`](/categorize/tags/domain.md) [`osint`](/categorize/tags/osint.md) [`apk`](/categorize/tags/apk.md) [`portscan`](/categorize/tags/portscan.md) [`endpoint`](/categorize/tags/endpoint.md) [`online`](/categorize/tags/online.md) [`ssrf`](/categorize/tags/ssrf.md) [`path-traversal`](/categorize/tags/path-traversal.md) [`cache-vuln`](/categorize/tags/cache-vuln.md) [`jwt`](/categorize/tags/jwt.md) [`crlf`](/categorize/tags/crlf.md) [`smuggle`](/categorize/tags/smuggle.md) [`xss`](/categorize/tags/xss.md) [`cors`](/categorize/tags/cors.md) [`aaa`](/categorize/tags/aaa.md) [`s3`](/categorize/tags/s3.md) [`ssl`](/categorize/tags/ssl.md) [`dependency-confusion`](/categorize/tags/dependency-confusion.md) [`oast`](/categorize/tags/oast.md) [`broken-link`](/categorize/tags/broken-link.md) [`sqli`](/categorize/tags/sqli.md) [`exploit`](/categorize/tags/exploit.md) [`403`](/categorize/tags/403.md) [`csp`](/categorize/tags/csp.md) [`RMI`](/categorize/tags/RMI.md) [`rop`](/categorize/tags/rop.md) [`xxe`](/categorize/tags/xxe.md) [`lfi`](/categorize/tags/lfi.md) [`blind-xss`](/categorize/tags/blind-xss.md) [`deserialize`](/categorize/tags/deserialize.md) [`fuzz`](/categorize/tags/fuzz.md) [`http`](/categorize/tags/http.md) [`nuclei-templates`](/categorize/tags/nuclei-templates.md) [`documents`](/categorize/tags/documents.md) [`wordlist`](/categorize/tags/wordlist.md) [`report`](/categorize/tags/report.md) [`notify`](/categorize/tags/notify.md) [`payload`](/categorize/tags/payload.md) [`diff`](/categorize/tags/diff.md) [`cookie`](/categorize/tags/cookie.md) [`clipboard`](/categorize/tags/clipboard.md) [`zipbomb`](/categorize/tags/zipbomb.md) [`web3`](/categorize/tags/web3.md) [`darkmode`](/categorize/tags/darkmode.md) |
|
||||
| Langs | [`Shell`](/categorize/langs/Shell.md) [`Java`](/categorize/langs/Java.md) [`Go`](/categorize/langs/Go.md) [`Ruby`](/categorize/langs/Ruby.md) [`Python`](/categorize/langs/Python.md) [`Rust`](/categorize/langs/Rust.md) [`JavaScript`](/categorize/langs/JavaScript.md) [`C`](/categorize/langs/C.md) [`Kotlin`](/categorize/langs/Kotlin.md) [`Perl`](/categorize/langs/Perl.md) [`TypeScript`](/categorize/langs/TypeScript.md) [`HTML`](/categorize/langs/HTML.md) [`C++`](/categorize/langs/C++.md) [`CSS`](/categorize/langs/CSS.md) [`C#`](/categorize/langs/C%23.md) [`PHP`](/categorize/langs/PHP.md) [`BlitzBasic`](/categorize/langs/BlitzBasic.md) [`Txt`](/categorize/langs/Txt.md) |
|
||||
|
||||
### Tools
|
||||
|
|
@ -53,7 +53,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
|Recon|[rengine](https://github.com/yogeshojha/rengine)|reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[subjack](https://github.com/haccer/subjack)|Subdomain Takeover tool written in Go ||[`subdomains`](/categorize/tags/subdomains.md) [`takeover`](/categorize/tags/takeover.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[gau](https://github.com/lc/gau)|Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|
|
@ -116,9 +116,9 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
|Recon|[puredns](https://github.com/d3mondev/puredns)|Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.|||[](/categorize/langs/Go.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Chaos Web](https://chaos.projectdiscovery.io)| actively scan and maintain internet-wide assets' data. enhance research and analyse changes around DNS for better insights.||||
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[htcat](https://github.com/htcat/htcat)|Parallel and Pipelined HTTP GET Utility |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[gitrob](https://github.com/michenriksen/gitrob)|Reconnaissance tool for GitHub organizations |||[](/categorize/langs/Go.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[httpx](https://github.com/projectdiscovery/httpx)|httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. ||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Go.md)|
|
||||
|
|
@ -168,7 +168,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
|Scanner|[http2smugl](https://github.com/neex/http2smugl)|This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wprecon](https://github.com/blackcrw/wprecon)|Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.|||[](/categorize/langs/Go.md)|
|
||||
|Scanner|[corsair_scan](https://github.com/Santandersecurityresearch/corsair_scan)|Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).||[`cors`](/categorize/tags/cors.md)|[](/categorize/langs/Python.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[web_cache_poison](https://github.com/fngoo/web_cache_poison)|web cache poison - Top 1 web hacking technique of 2019||[`cache-vuln`](/categorize/tags/cache-vuln.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[ws-smuggler](https://github.com/hahwul/ws-smuggler)|WebSocket Connection Smuggler||[`smuggle`](/categorize/tags/smuggle.md)|[](/categorize/langs/Go.md)|
|
||||
|Scanner|[wpscan](https://github.com/wpscanteam/wpscan)|WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |||[](/categorize/langs/Ruby.md)|
|
||||
|
|
@ -352,7 +352,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[DotGit](https://github.com/davtur19/DotGit)|An extension for checking if .git is exposed in visited websites|||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[Wayback Machine](https://apps.apple.com/us/app/wayback-machine/id1472432422)|History of website||||
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[Dark Reader for Safari](https://apps.apple.com/us/app/dark-reader-for-safari/id1438243180)|Dark mode to any site||||
|
||||
|
|
@ -373,7 +373,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
|Recon|[burp-retire-js](https://github.com/h3xstream/burp-retire-js)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Recon|[reflected-parameters](https://github.com/PortSwigger/reflected-parameters)|||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[attack-surface-detector-zap](https://github.com/secdec/attack-surface-detector-zap)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)||||[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[attack-surface-detector-burp](https://github.com/secdec/attack-surface-detector-burp)|The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters||[`endpoint`](/categorize/tags/endpoint.md)|[](/categorize/langs/Java.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpSuite-Secret_Finder](https://github.com/m4ll0k/BurpSuite-Secret_Finder)|||||
|
||||
|
|
|
|||
|
|
@ -8,14 +8,14 @@
|
|||
|Recon|[DotGit](https://github.com/davtur19/DotGit)|An extension for checking if .git is exposed in visited websites|||[](/categorize/langs/JavaScript.md)|
|
||||
|Fuzzer|[jwt-cracker](https://github.com/lmammino/jwt-cracker)|Simple HS256 JWT token brute force cracker ||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[DOMPurify](https://github.com/cure53/DOMPurify)|DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[xsinator.com](https://github.com/RUB-NDS/xsinator.com)|XS-Leak Browser Test Suite|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[github-search](https://github.com/gwen001/github-search)|Tools to perform basic search on GitHub. |||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[PPScan](https://github.com/msrkp/PPScan)|Client Side Prototype Pollution Scanner|||[](/categorize/langs/JavaScript.md)|
|
||||
|Scanner|[domdig](https://github.com/fcavallarin/domdig)|DOM XSS scanner for Single Page Applications ||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Exploit|[singularity](https://github.com/nccgroup/singularity)|A DNS rebinding attack framework.|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[community-scripts](https://github.com/zaproxy/community-scripts)||||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[xssor2](https://github.com/evilcos/xssor2)|XSS'OR - Hack with JavaScript.||[`xss`](/categorize/tags/xss.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[MM3 ProxySwitch](https://proxy-offline-browser.com/ProxySwitch/)|Proxy Switch in Firefox and Chrome|||[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[jsonwebtoken.github.io](https://github.com/jsonwebtoken/jsonwebtoken.github.io)|JWT En/Decode and Verify||[`jwt`](/categorize/tags/jwt.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
|
|
|||
|
|
@ -8,7 +8,7 @@
|
|||
|Recon|[uro](https://github.com/s0md3v/uro)|declutters url lists for crawling/pentesting||[`url`](/categorize/tags/url.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Silver](https://github.com/s0md3v/Silver)|Mass scan IPs for vulnerable services ||[`port`](/categorize/tags/port.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[altdns](https://github.com/infosec-au/altdns)|Generates permutations, alterations and mutations of subdomains and then resolves them ||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[3klCon](https://github.com/eslam3kl/3klCon)|Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[knock](https://github.com/guelfoweb/knock)|Knock Subdomain Scan ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[Arjun](https://github.com/s0md3v/Arjun)|HTTP parameter discovery suite. ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|
|
@ -20,7 +20,7 @@
|
|||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[GitMiner](https://github.com/UnkL4b/GitMiner)|Tool for advanced mining for content on Github |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)||||[](/categorize/langs/Python.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[BLUTO](https://github.com/darryllane/Bluto)|DNS Analysis Tool||[`dns`](/categorize/tags/dns.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[FavFreak](https://github.com/devanshbatham/FavFreak)|Making Favicon.ico based Recon Great again ! |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[longtongue](https://github.com/edoardottt/longtongue)|Customized Password/Passphrase List inputting Target Info|||[](/categorize/langs/Python.md)|
|
||||
|
|
@ -30,7 +30,7 @@
|
|||
|Recon|[Parth](https://github.com/s0md3v/Parth)|Heuristic Vulnerable Parameter Scanner ||[`param`](/categorize/tags/param.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[pagodo](https://github.com/opsdisk/pagodo)|pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Dr. Watson](https://github.com/prodigysml/Dr.-Watson)|Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information||[`param`](/categorize/tags/param.md) [`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target|||[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[dirsearch](https://github.com/maurosoria/dirsearch)|Web path scanner |||[](/categorize/langs/Python.md)|
|
||||
|Recon|[Sublist3r](https://github.com/aboul3la/Sublist3r)|Fast subdomains enumeration tool for penetration testers ||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[SubBrute](https://github.com/aboul3la/Sublist3r)|https://github.com/TheRook/subbrute||[`subdomains`](/categorize/tags/subdomains.md)|[](/categorize/langs/Python.md)|
|
||||
|
|
|
|||
|
|
@ -7,7 +7,7 @@
|
|||
|Recon|[megplus](https://github.com/EdOverflow/megplus)|Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED] |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[reconftw](https://github.com/six2dez/reconftw)|reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities|||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[lazyrecon](https://github.com/nahamsec/lazyrecon)|This script is intended to automate your reconnaissance process in an organized fashion |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. |||[](/categorize/langs/Shell.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Shell.md)|
|
||||
|Recon|[recon_profile](https://github.com/nahamsec/recon_profile)|Recon profile (bash profile) for bugbounty |||[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[SSRFire](https://github.com/ksharinarayanan/SSRFire)|An automated SSRF finder. Just give the domain name and your server and chill||[`ssrf`](/categorize/tags/ssrf.md)|[](/categorize/langs/Shell.md)|
|
||||
|Fuzzer|[BruteX](https://github.com/1N3/BruteX)|Automatically brute force all services running on a target.|||[](/categorize/langs/Shell.md)|
|
||||
|
|
|
|||
|
|
@ -3,5 +3,11 @@
|
|||
|
||||
| Type | Name | Description | Star | Tags | Badges |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
|Recon|[LinkFinder](https://github.com/GerbenJavado/LinkFinder)|A python script that finds endpoints in JavaScript files ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[jsluice](https://github.com/BishopFox/jsluice)|Extract URLs, paths, secrets, and other interesting bits from JavaScript||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Go.md)|
|
||||
|Recon|[BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder)|||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[xnLinkFinder](https://github.com/xnl-h4ck3r/xnLinkFinder)|A python tool used to discover endpoints (and potential parameters) for a given target||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Python.md)|
|
||||
|Recon|[JSFScan.sh](https://github.com/KathanP19/JSFScan.sh)|Automation for javascript recon in bug bounty. ||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/Shell.md)|
|
||||
|Scanner|[jsprime](https://github.com/dpnishant/jsprime)|a javascript static security analysis tool||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|Utils|[postMessage-tracker](https://github.com/fransr/postMessage-tracker)|A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon||[`js-analysis`](/categorize/tags/js-analysis.md)|[](/categorize/langs/JavaScript.md)|
|
||||
|
||||
|
|
|
|||
|
|
@ -1 +1 @@
|
|||
Sun Jul 9 14:38:39 UTC 2023
|
||||
Sun Jul 9 14:41:39 UTC 2023
|
||||
|
|
|
|||
Loading…
Reference in New Issue