PENETRATION TESTING · BUG BOUNTY · OPEN SOURCE

Security Tools

A curated database of security tools for penetration testers and bug bounty hunters. Filter by category or search below.

Security Cipher

Request a New Tool ..

CMS

DNS

SSL

Subdomain Enumeration

Subdomain Takeover

Utility Tool

🔥NewAwesome-Hacking

Curated collection of awesome lists for hackers, pentesters and security researchers.

Resources | Select All

🔥NewFuzzDB

Dictionary of attack patterns and primitives for black-box application fault injection and discovery.

Resources | Select All

🔥NewSecLists

The security tester's companion: a massive collection of wordlists for fuzzing, discovery and password attacks.

Resources | Select All

🔥Newangr

Platform-agnostic binary analysis framework with symbolic execution for finding and exploiting bugs.

Miscellaneous | Select All

🔥Newpwntools

CTF and exploit development framework that makes writing exploits fast and painless.

Miscellaneous | Select All

🔥NewGhidra

NSA's software reverse-engineering suite with a powerful decompiler and disassembler.

Miscellaneous | Select All

🔥Newradare2

Portable reverse-engineering framework and command-line disassembler/debugger.

Miscellaneous | Select All

🔥Newoletools

Python tools to analyze Microsoft OLE2 files and detect malicious macros in documents.

Digital Forensics | Select All

🔥NewVolatility3

Advanced memory forensics framework for extracting artifacts from RAM captures.

Digital Forensics | Select All

🔥Newbinwalk

Firmware analysis tool for searching binaries for embedded files and executable code.

Digital Forensics | Select All

🔥Newmitmproxy

Interactive HTTPS proxy for intercepting, inspecting, modifying and replaying web traffic.

Select All | Utility Tool

🔥NewLigolo-ng

Advanced, tunneling/pivoting tool that uses a TUN interface for reverse tunnels.

Select All | Utility Tool

🔥Newchisel

Fast TCP/UDP tunnel over HTTP, secured via SSH, great for pivoting through firewalls.

Select All | Utility Tool

🔥NewZMap

Fast single-packet network scanner capable of surveying the entire IPv4 address space.

Port Scanning | Select All

🔥Newjadx

Decompiles Android Dex and APK files to readable Java source code.

Android | Select All

🔥NewApktool

Reverse-engineering tool for decoding and rebuilding Android APK resources.

Android | Select All

🔥Newobjection

Runtime mobile exploration toolkit powered by Frida for assessing Android and iOS apps without a jailbreak.

Android | Select All

🔥NewFrida

Dynamic instrumentation toolkit for injecting scripts into native apps on Android, iOS and desktop.

Android | Select All

🔥Newbettercap

Swiss-army knife for network attacks and monitoring, including MITM, Wi-Fi, BLE and Ethernet.

Miscellaneous | Select All

🔥NewMobSF

Automated mobile app (Android/iOS/Windows) security assessment framework for static and dynamic analysis.

Android | Select All

🔥NewWifite2

Automated wireless attack tool that audits WEP, WPA and WPS encrypted networks.

Miscellaneous | Select All

🔥NewAircrack-ng

Complete suite of tools to assess Wi-Fi network security: monitoring, attacking, testing and cracking.

Miscellaneous | Select All

🔥NewCeWL

Custom word list generator that spiders a target site to build targeted cracking dictionaries.

Select All | Utility Tool

🔥NewMedusa

Speedy, parallel, modular login brute-forcer supporting many remote authentication services.

Select All | Utility Tool

🔥NewName-That-Hash

Identifies the type of a given hash and provides cracking hints (the modern hash-id).

Select All | Utility Tool

🔥NewJohn the Ripper

Fast, feature-rich password cracker supporting hundreds of hash and cipher types.

Select All | Utility Tool

🔥Newhashcat

World's fastest and most advanced password recovery utility, supporting hundreds of hash algorithms and GPU acceleration.

Select All | Utility Tool

🔥Newpwncat

Post-exploitation platform that upgrades reverse/bind shells and automates privilege escalation.

Miscellaneous | Select All

🔥NewKerbrute

Quickly brute-forces and enumerates valid Active Directory accounts through Kerberos pre-authentication.

Miscellaneous | Select All

🔥NewSliver

Open-source cross-platform adversary emulation and command-and-control framework.

Miscellaneous | Select All

🔥NewCertipy

Tool to enumerate and abuse Active Directory Certificate Services (AD CS) misconfigurations.

Miscellaneous | Select All

🔥Newenum4linux-ng

Next-generation SMB/NetBIOS enumeration tool for gathering information from Windows and Samba hosts.

Miscellaneous | Select All

🔥Newevil-winrm

The ultimate WinRM shell for hacking and post-exploitation of Windows targets.

Miscellaneous | Select All

🔥NewBloodHound

Uses graph theory to reveal hidden and unintended relationships within an Active Directory environment.

Miscellaneous | Select All

🔥NewImpacket

Collection of Python classes for working with network protocols, widely used for SMB/Kerberos attacks.

Miscellaneous | Select All

🔥NewNetExec

Network service exploitation tool (the CrackMapExec successor) for pentesting Windows/Active Directory.

Miscellaneous | Select All

🔥NewCloudsplaining

AWS IAM security assessment tool that flags least-privilege violations and risky permissions.

Cloud | Select All

🔥NewSyft

Generates a software bill of materials (SBOM) from container images and filesystems.

Cloud | Select All

🔥NewGrype

Vulnerability scanner for container images and filesystems with an easy-to-integrate CLI.

Cloud | Select All

🔥NewCheckov

Static analysis for infrastructure-as-code (Terraform, CloudFormation, Kubernetes) to catch misconfigurations.

Cloud | Select All

🔥NewKubescape

Kubernetes security platform that scans clusters, manifests and images for misconfigurations and vulnerabilities.

Cloud | Select All

🔥Newkube-bench

Checks whether Kubernetes is deployed securely against the CIS Kubernetes Benchmark.

Cloud | Select All

🔥Newkube-hunter

Hunts for security weaknesses in Kubernetes clusters from an attacker's perspective.

Cloud | Select All

🔥NewTrivy

Comprehensive scanner for vulnerabilities, misconfigurations and secrets in containers, IaC and filesystems.

Cloud | Select All

🔥NewScoutSuite

Multi-cloud security auditing tool that reports on the configuration posture of AWS, Azure and GCP.

Cloud | Select All

🔥NewPacu

AWS exploitation framework for testing the security posture of Amazon Web Services environments.

Cloud | Select All

🔥NewGitjacker

Downloads and rebuilds git repositories exposed via a misconfigured .git directory.

Secret | Select All

🔥NewProwler

Cloud security assessment tool for AWS, Azure, GCP and Kubernetes covering CIS and dozens of compliance frameworks.

Cloud | Select All

🔥NewSecretFinder

Discovers sensitive data like API keys, tokens and secrets inside JavaScript files.

Secret | Select All

🔥NewCodeQL

Semantic code analysis engine that queries code as data to find security vulnerabilities.

SAST | Select All

🔥NewHorusec

Open-source SAST tool that scans projects and dependencies across many languages for vulnerabilities.

SAST | Select All

🔥Newnjsscan

Static application security testing tool that finds insecure code patterns in Node.js apps.

SAST | Select All

🔥Newgosec

Inspects Go source code for security problems by scanning the abstract syntax tree.

SAST | Select All

🔥NewSemgrep

Fast, open-source static analysis engine that finds bugs and enforces code standards across 30+ languages.

SAST | Select All

🔥NewNettacker

Automated penetration testing framework for information gathering, vulnerability scanning and network mapping.

DAST | Select All

🔥NewVuls

Agentless vulnerability scanner for Linux/FreeBSD servers, containers and network devices.

DAST | Select All

🔥Newgithub-subdomains

Finds subdomains for a target by mining GitHub code search results.

Select All | Subdomain Enumeration

🔥Newdnsgen

Generates combinations of domain names from provided input to feed resolvers during subdomain discovery.

Select All | Subdomain Enumeration

🔥Newpuredns

Fast domain resolver and subdomain brute-forcer that accurately handles wildcards at scale.

Select All | Subdomain Enumeration

🔥Newaltdns

Generates and resolves permutations, alterations and mutations of known subdomains.

Select All | Subdomain Enumeration

🔥Newfierce

DNS reconnaissance tool that locates non-contiguous IP space and hostnames for a target domain.

DNS | Select All

🔥Newknockpy

Python tool to enumerate subdomains on a target domain through a wordlist and passive sources.

Select All | Subdomain Enumeration

🔥Newdnsrecon

DNS enumeration script for zone transfers, record brute forcing, cache snooping and reverse lookups.

DNS | Select All

🔥NewAPKLeaks

Scans Android APKs for URIs, endpoints and secrets baked into the application.

Android | Select All

🔥Newwafw00f

Identifies and fingerprints the WAF product sitting in front of a web application.

Recon | Select All

🔥NewWhatWaf

Detects and fingerprints web application firewalls and suggests bypass techniques.

Recon | Select All

🔥Newholehe

Checks whether an email is registered on 120+ sites using password-reset and signup flows without alerting the target.

Recon | Select All

🔥NewSherlock

Hunts down social media accounts by username across hundreds of sites for OSINT investigations.

Recon | Select All

🔥NewPhoton

Fast crawler designed for OSINT that extracts URLs, emails, secrets and endpoints from a target.

Recon | Select All

🔥Newrecon-ng

Full-featured reconnaissance framework with an interactive, module-based interface modeled on Metasploit.

Recon | Select All

🔥NewSpiderFoot

Automated OSINT reconnaissance tool that queries 200+ data sources to map a target's attack surface.

Recon | Select All

🔥NewtheHarvester

Gathers emails, subdomains, hosts, employee names, open ports and banners from public sources for red-team recon and footprinting.

Recon | Select All

🔥Newferoxbuster

A fast, simple, recursive content discovery tool written in Rust for finding hidden directories and files on web servers.

Recon | Select All

🔥Secrets.tools

Allows scanning single page applications for the detection of API keys, emails, URLs and IP addresses.

Secret | Select All

🔥BugBountyToolkit

A multiplatform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.

Select All | Utility Tool

🔥NucleiFuzzer

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

DAST | Select All

🔥Jsluice

jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code.

Recon | Select All

🔥lazys3

A Ruby script to brute-force for AWS s3 buckets using different permutations.

Cloud | Recon | Select All

This is a basic HTTP scanner that enumerates virtual hosts on a given IP address. During recon, this might help expand the target by detecting old or deprecated code. It may also reveal hidden hosts that are statically mapped in the developer's /etc/hosts file.

Recon | Select All

🔥Unfurl

Pull out bits of URLs provided on stdin

Select All | Utility Tool

🔥Asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

Recon | Select All

🔥Meg

Meg is a tool for fetching lots of URLs without taking a toll on the servers. It can be used to fetch many paths for many hosts, or fetching a single path for all hosts before moving on to the next path and repeating.

Recon | Select All | Utility Tool

🔥dnsprobe

DNSProbe is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user-supplied resolvers.

Recon | Select All

🔥Chaos

Chaos actively scans and maintains internet-wide assets' data. This project is meant to enhance research and analyze changes around DNS for better insights.

Recon | Select All | Subdomain Enumeration

🔥Shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

Secret | Select All

🔥sslyze

Fast and powerful SSL/TLS scanning library.

Select All | SSL

🔥testssl.sh

Testing TLS/SSL encryption anywhere on any port

Select All | SSL

🔥Wifipumpkin3

Powerful framework for rogue access point attack.

Miscellaneous | Select All

🔥xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

Recon | Select All

🔥sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Digital Forensics | Select All

🔥routersploit

Exploitation Framework for Embedded Devices

Miscellaneous | Select All

🔥w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

DAST | Select All

🔥brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

SAST | Select All

🔥Faraday

Open Source Vulnerability Management Platform

Miscellaneous | Select All

🔥rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Recon | Select All | Subdomain Enumeration

🔥wb

Quickly fetches files from Wayback Machine.

Recon | Select All

🔥Phonebook.cz

Phonebook lists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed.

Recon | Select All

🔥Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Miscellaneous | Select All

🔥XFFenum

X-Forwarded-For [403 forbidden] enumeration

DAST | Select All

🔥awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff.

Android | Resources | Select All

🔥awesome-vulnerable-apps

Awesome Vulnerable Applications

Resources | Select All

🔥bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Miscellaneous | Select All

🔥android-security-awesome

A collection of android security related resources

Android | Resources | Select All

🔥CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Select All | Utility Tool

🔥PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Resources | Select All

🔥SSTImap

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself.

DAST | Select All

🔥JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

DAST | Select All

🔥cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more...

Recon | Select All

🔥OWASP ZAP

World’s most popular free web security tools and is actively maintained by a dedicated international team of volunteers

DAST | Select All

🔥getsploit

Command line utility for searching and downloading exploits

Miscellaneous | Select All

🔥Eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

DAST | Select All

🔥jaeles

The Swiss Army knife for automated Web Application Testing

DAST | Select All

🔥Osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

DAST | Recon | Select All

🔥nikto

Nikto web server scanner

DAST | Select All

🔥arachni

Web Application Security Scanner Framework

DAST | Select All

🔥Sn1per

Automated pentest framework for offensive security experts

Recon | Select All

🔥metasploit-framework

Metasploit Framework

Miscellaneous | Select All

🔥can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Select All | Subdomain Takeover

🔥takeover

A tool for testing subdomain takeover possibilities at a mass scale.

Recon | Select All | Subdomain Takeover

🔥subjack

Subdomain Takeover tool written in Go

Recon | Select All | Subdomain Takeover

🔥SubOver

A Powerful Subdomain Takeover Tool

Recon | Select All | Subdomain Takeover

🔥jwt-hack

jwt-hack is tool for hacking / security testing to JWT.

DAST | Select All

🔥postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

Extension | Select All

🔥jwt_tool

A toolkit for testing, tweaking and cracking JSON Web Tokens

DAST | Select All

🔥jwt-cracker

Simple HS256 JWT token brute force cracker

DAST | Select All

🔥CMSmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

CMS | DAST | Select All

🔥joomscan

OWASP Joomla Vulnerability Scanner Project

CMS | DAST | Select All

🔥wpscan

WPScan is a free, for non-commercial use, black box WordPress security scanner

CMS | DAST | Select All

🔥WPSpider

A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.

CMS | DAST | Select All

🔥CloudScraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

Cloud | Select All

🔥S3BucketList

Firefox plugin that lists Amazon S3 Buckets found in requests

Cloud | Select All

🔥S3Scanner

Scan for open AWS S3 buckets and dump the contents

Cloud | Select All

🔥AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets

Cloud | Select All

🔥GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

Secret | Select All

🔥GitHunter

A tool for searching a Git repository for interesting content

Secret | Select All

🔥GitMiner

Tool for advanced mining for content on Github

Secret | Select All

🔥detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

Secret | Select All

🔥github-search

Tools to perform basic search on GitHub.

Secret | Select All

🔥gitrob

Reconnaissance tool for GitHub organizations

Secret | Select All

🔥GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Secret | Select All

🔥git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

Secret | Select All

🔥truffleHog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Secret | Select All

🔥gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services

Secret | Select All

🔥git-secrets

Prevents you from committing secrets and credentials into git repositories

Secret | Select All

🔥gitleaks

Scan git repos (or files) for secrets using regex and entropy

Secret | Select All

🔥thc-hydra

Hydra is a parallelized login cracker which supports numerous protocols to attack.

Miscellaneous | Select All

🔥BruteX

Automatically brute force all services running on a target.

DAST | Select All

🔥xxexploiter

Tool to help exploit XXE vulnerabilities

DAST | Select All

🔥XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

DAST | Select All

🔥domxssscanner

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

DAST | Select All

🔥XSSwagger

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks

DAST | Select All

🔥XSS-Radar

XSS Radar is a tool that detects parameters and fuzzes them for cross-site scripting vulnerabilities.

DAST | Select All

🔥BruteXSS

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application.

DAST | Select All

🔥xssValidator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

DAST | Select All

🔥bXSS

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

DAST | Select All

🔥dalfox

DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

DAST | Select All

🔥xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

DAST | Select All

🔥xsscrapy

XSS spider - 66/66 wavsep XSS detected

DAST | Select All

🔥xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

DAST | Select All

🔥XSStrike

Most advanced XSS scanner.

DAST | Select All

🔥xssor2

XSS'OR - Hack with JavaScript.

DAST | Select All

🔥SQLiScanner

Automatic SQL injection with Charles and sqlmap api

DAST | Select All

🔥waybackSqliScanner

Gather urls from wayback machine then test each GET parameter for sql injection.

DAST | Recon | Select All

🔥sqlmap

Automatic SQL injection and database takeover tool

DAST | Select All

🔥NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

DAST | Select All

🔥ssrfDetector

Server-side request forgery detector

DAST | Select All

🔥httprebind

Automatic tool for DNS rebinding-based SSRF attacks

DAST | Select All

🔥SSRFire

An automated SSRF finder. Just give the domain name and your server and chill! 😉 Also has options to find XSS and open redirects

DAST | Select All

🔥gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

DAST | Recon | Select All

🔥smuggler

An HTTP Request Smuggling / Desync testing tool written in Python 3

DAST | Select All

🔥SSRFmap

Automatic SSRF fuzzer and exploitation tool

DAST | Select All

🔥race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

DAST | Select All

🔥http-request-smuggling

HTTP Request Smuggling Detection Tool

DAST | Select All

🔥requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

DAST | Select All

🔥turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

DAST | Extension | Select All

🔥OpenRedireX

A Fuzzer for OpenRedirect issues

DAST | Select All

🔥razzer

A Kernel fuzzer focusing on race bugs

DAST | Select All

🔥Oralyzer

Open Redirection Analyzer

DAST | Select All

🔥Injectus

CRLF and open redirect fuzzer

DAST | Select All

🔥ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

DAST | Select All

🔥Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily

DAST | Extension | Select All

🔥shapeshifter

GraphQL security testing tool

DAST | Select All

🔥headi

Customisable and automated HTTP header injection.

DAST | Select All

🔥GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

DAST | Select All

🔥dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

DAST | Select All

🔥inql

A Burp Extension for GraphQL Security Testing

DAST | Select All

🔥CRLF-Injection-Scanner

Command line tool for testing CRLF injection on a list of domains.

DAST | Select All

🔥XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

DAST | Select All

🔥CORStest

A simple CORS misconfiguration scanner

DAST | Select All

🔥CRLFsuite

A fast tool specially designed to scan CRLF injection

DAST | Select All

🔥commix

Automated All-in-One OS command injection and exploitation tool.

DAST | Select All

🔥Corsy

CORS Misconfiguration Scanner

DAST | Select All

🔥wfuzz

Web application fuzzer

Recon | Select All

🔥ffuf

Fast web fuzzer written in Go

Recon | Select All

🔥Arjun

HTTP parameter discovery suite.

Recon | Select All

🔥ParamSpider

Mining parameters from dark corners of Web Archives.

Recon | Select All

🔥parameth

This tool can be used to brute discover GET and POST parameters

DAST | Select All

🔥param-miner

This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.

DAST | Extension | Select All

🔥gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Recon | Select All

🔥getJS

A tool to fastly get all javascript sources/files

Recon | Select All

🔥BurpJSLinkFinder

Burp Extension for a passive scanning JS files for endpoint links.

Recon | Select All

🔥waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

Recon | Select All

🔥LinkFinder

A python script that finds endpoints in JavaScript files

Recon | Select All

🔥LinksDumper

Extract (links/possible endpoints) from responses & filter them via decoding/sorting

Recon | Select All

🔥hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Recon | Select All

🔥filebuster

An extremely fast and flexible web fuzzer

Recon | Select All

🔥gospider

Gospider - Fast web spider written in Go

Recon | Select All

🔥gobuster

Directory/File, DNS and VHost busting tool written in Go

Recon | Select All

🔥dirsearch

Web path scanner

Recon | Select All

🔥retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

Recon | Select All

🔥fingerprintx

fingerprintx is a standalone utility for service discovery on open ports that works well with other popular bug bounty command line tools.

Recon | Select All

🔥webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

Recon | Select All

🔥whatweb

Next generation web scanner

Recon | Select All