Discovery/CRAWL |
Photon |
Incredibly fast crawler designed for OSINT. |
![](https://img.shields.io/github/stars/s0md3v/Photon) |
![](https://img.shields.io/github/languages/top/s0md3v/Photon) |
Discovery/CRAWL |
gospider |
Gospider - Fast web spider written in Go |
![](https://img.shields.io/github/stars/jaeles-project/gospider) |
![](https://img.shields.io/github/languages/top/jaeles-project/gospider) |
Discovery/DNS |
dnsprobe |
DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |
![](https://img.shields.io/github/stars/projectdiscovery/dnsprobe) |
![](https://img.shields.io/github/languages/top/projectdiscovery/dnsprobe) |
Discovery/DNS |
shuffledns |
shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. |
![](https://img.shields.io/github/stars/projectdiscovery/shuffledns) |
![](https://img.shields.io/github/languages/top/projectdiscovery/shuffledns) |
Discovery/DOMAIN |
Amass |
In-depth Attack Surface Mapping and Asset Discovery |
![](https://img.shields.io/github/stars/OWASP/Amass) |
![](https://img.shields.io/github/languages/top/OWASP/Amass) |
Discovery/DOMAIN |
assetfinder |
Find domains and subdomains related to a given domain |
![](https://img.shields.io/github/stars/tomnomnom/assetfinder) |
![](https://img.shields.io/github/languages/top/tomnomnom/assetfinder) |
Discovery/DOMAIN |
findomain |
The fastest and cross-platform subdomain enumerator, do not waste your time. |
![](https://img.shields.io/github/stars/Edu4rdSHL/findomain) |
![](https://img.shields.io/github/languages/top/Edu4rdSHL/findomain) |
Discovery/DOMAIN |
subfinder |
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. |
![](https://img.shields.io/github/stars/projectdiscovery/subfinder) |
![](https://img.shields.io/github/languages/top/projectdiscovery/subfinder) |
Discovery/HTTP |
Arjun |
HTTP parameter discovery suite. |
![](https://img.shields.io/github/stars/s0md3v/Arjun) |
![](https://img.shields.io/github/languages/top/s0md3v/Arjun) |
Discovery/PORT |
masscan |
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |
![](https://img.shields.io/github/stars/robertdavidgraham/masscan) |
![](https://img.shields.io/github/languages/top/robertdavidgraham/masscan) |
Discovery/PORT |
naabu |
A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |
![](https://img.shields.io/github/stars/projectdiscovery/naabu) |
![](https://img.shields.io/github/languages/top/projectdiscovery/naabu) |
Discovery/PORT |
nmap |
Nmap - the Network Mapper. Github mirror of official SVN repository. |
![](https://img.shields.io/github/stars/nmap/nmap) |
![](https://img.shields.io/github/languages/top/nmap/nmap) |
Discovery/URL |
waybackurls |
Fetch all the URLs that the Wayback Machine knows about for a domain |
![](https://img.shields.io/github/stars/tomnomnom/waybackurls) |
![](https://img.shields.io/github/languages/top/tomnomnom/waybackurls) |
Discovery/VULN |
Silver |
Mass scan IPs for vulnerable services |
![](https://img.shields.io/github/stars/s0md3v/Silver) |
![](https://img.shields.io/github/languages/top/s0md3v/Silver) |
Fetch/TOM |
httprobe |
Take a list of domains and probe for working HTTP and HTTPS servers |
![](https://img.shields.io/github/stars/tomnomnom/httprobe) |
![](https://img.shields.io/github/languages/top/tomnomnom/httprobe) |
Fetch/TOM |
meg |
Fetch many paths for many hosts - without killing the hosts |
![](https://img.shields.io/github/stars/tomnomnom/meg) |
![](https://img.shields.io/github/languages/top/tomnomnom/meg) |
Fetch/WSOCK |
websocket-connection-smuggler |
websocket-connection-smuggler |
![](https://img.shields.io/github/stars/hahwul/websocket-connection-smuggler) |
![](https://img.shields.io/github/languages/top/hahwul/websocket-connection-smuggler) |
Scanner/CORS |
Corsy |
CORS Misconfiguration Scanner |
![](https://img.shields.io/github/stars/s0md3v/Corsy) |
![](https://img.shields.io/github/languages/top/s0md3v/Corsy) |
Scanner/NOSQL |
NoSQLMap |
Automated NoSQL database enumeration and web application exploitation tool. |
![](https://img.shields.io/github/stars/codingo/NoSQLMap) |
![](https://img.shields.io/github/languages/top/codingo/NoSQLMap) |
Scanner/SQL |
sqlmap |
Automatic SQL injection and database takeover tool |
![](https://img.shields.io/github/stars/sqlmapproject/sqlmap) |
![](https://img.shields.io/github/languages/top/sqlmapproject/sqlmap) |
Scanner/SQL |
sqlninja |
SQL Injection Tool |
![](https://img.shields.io/github/stars/xxgrunge/sqlninja) |
![](https://img.shields.io/github/languages/top/xxgrunge/sqlninja) |
Scanner/SSL |
a2sv |
Auto Scanning to SSL Vulnerability |
![](https://img.shields.io/github/stars/hahwul/a2sv) |
![](https://img.shields.io/github/languages/top/hahwul/a2sv) |
Scanner/WVS |
Striker |
Striker is an offensive information and vulnerability scanner. |
![](https://img.shields.io/github/stars/s0md3v/Striker) |
![](https://img.shields.io/github/languages/top/s0md3v/Striker) |
Scanner/XSS |
XSStrike |
Most advanced XSS scanner. |
![](https://img.shields.io/github/stars/s0md3v/XSStrike) |
![](https://img.shields.io/github/languages/top/s0md3v/XSStrike) |
Scanner/XSS |
xspear |
Powerfull XSS Scanning and Parameter analysis tool&gem |
![](https://img.shields.io/github/stars/hahwul/xspear) |
![](https://img.shields.io/github/languages/top/hahwul/xspear) |
Utility/CLIP |
ftc |
simple copy to file to clipboard |
![](https://img.shields.io/github/stars/hahwul/ftc) |
![](https://img.shields.io/github/languages/top/hahwul/ftc) |
Utility/GREP |
gf |
A wrapper around grep, to help you grep for things |
![](https://img.shields.io/github/stars/tomnomnom/gf) |
![](https://img.shields.io/github/languages/top/tomnomnom/gf) |
Utility/JSON |
gron |
Make JSON greppable! |
![](https://img.shields.io/github/stars/tomnomnom/gron) |
![](https://img.shields.io/github/languages/top/tomnomnom/gron) |
Utility/S3 |
s3reverse |
The format of various s3 buckets is convert in one format. for bugbounty and security testing. |
![](https://img.shields.io/github/stars/hahwul/s3reverse) |
![](https://img.shields.io/github/languages/top/hahwul/s3reverse) |