# Web Hacker's Weapons | Cool Tools Used By Web Hackers

**URL:** <https://onehack.st/t/web-hackers-weapons-cool-tools-used-by-web-hackers/87843>\
**Category:** Tools & Scripts\
**Tags:** hacking\
**Created:** [May 22, 2020, 1:57pm UTC](https://onehack.st/t/web-hackers-weapons-cool-tools-used-by-web-hackers/87843 "2020-05-22T13:57:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hyperdemongod](https://onehack.st/user_avatar/onehack.st/hyperdemongod/32/26170_2.png) [@Hyperdemongod](https://onehack.st/u/Hyperdemongod)\
**Post date:** [May 22, 2020, 1:57pm UTC](https://onehack.st/t/web-hackers-weapons-cool-tools-used-by-web-hackers/87843/1 "2020-05-22T13:57:51Z")

</div>

# 

[![](https://user-images.githubusercontent.com/13212227/78853228-53831900-7a59-11ea-8a73-f2fea997caa0.png)](https://github.com/hahwul/WebHackersWeapons/blob/master)

#### A collection of cool tools used by Web hackers.

## Happy hacking, Happy bug-hunting!!

# Weapons

| Type | Name | Description | Popularity | Language |
| --- | --- | --- | --- | --- |
| Army-Knife/ALL | [BurpSuite](https://portswigger.net/burp) | the BurpSuite project | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Army-Knife/SCAN | [jaeles](https://github.com/jaeles-project/jaeles) | The Swiss Army knife for automated Web Application Testing | [![](https://camo.githubusercontent.com/d627aa4b61e8e0021dbb76f63e04a6c35582dcd0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a61656c65732d70726f6a6563742f6a61656c6573)](https://camo.githubusercontent.com/d627aa4b61e8e0021dbb76f63e04a6c35582dcd0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a61656c65732d70726f6a6563742f6a61656c6573) | [![](https://camo.githubusercontent.com/c7324433fafe299e3c7f63cda4e221b2b0dfdb3c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a61656c65732d70726f6a6563742f6a61656c6573)](https://camo.githubusercontent.com/c7324433fafe299e3c7f63cda4e221b2b0dfdb3c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a61656c65732d70726f6a6563742f6a61656c6573) |
| Army-Knife/ALL | [zaproxy](https://github.com/zaproxy/zaproxy) | The OWASP ZAP core project | [![](https://camo.githubusercontent.com/34e632cb0caa680be09be547e0fa5989c7f6f088/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7a6170726f78792f7a6170726f7879)](https://camo.githubusercontent.com/34e632cb0caa680be09be547e0fa5989c7f6f088/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7a6170726f78792f7a6170726f7879) | [![](https://camo.githubusercontent.com/b0a4ceac5e807b42f3569a6cdf295f740e411c8a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7a6170726f78792f7a6170726f7879)](https://camo.githubusercontent.com/b0a4ceac5e807b42f3569a6cdf295f740e411c8a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7a6170726f78792f7a6170726f7879) |
| Discovery/ALL | [OneForAll](https://github.com/shmilylty/OneForAll) | OneForAll是一款功能强大的子域收集工具 | [![](https://camo.githubusercontent.com/12b5722ace10f09857af6853316c85247cd20d69/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73686d696c796c74792f4f6e65466f72416c6c)](https://camo.githubusercontent.com/12b5722ace10f09857af6853316c85247cd20d69/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73686d696c796c74792f4f6e65466f72416c6c) | [![](https://camo.githubusercontent.com/28bc03d26f7665c1ee9036948faa8b8b509f2ba1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73686d696c796c74792f4f6e65466f72416c6c)](https://camo.githubusercontent.com/28bc03d26f7665c1ee9036948faa8b8b509f2ba1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73686d696c796c74792f4f6e65466f72416c6c) |
| Discovery/ALL | [aquatone](https://github.com/michenriksen/aquatone) | A Tool for Domain Flyovers | [![](https://camo.githubusercontent.com/7e1907058f63965447243e0dbd287da0b93b2ed1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d696368656e72696b73656e2f61717561746f6e65)](https://camo.githubusercontent.com/7e1907058f63965447243e0dbd287da0b93b2ed1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d696368656e72696b73656e2f61717561746f6e65) | [![](https://camo.githubusercontent.com/77fc16468efa954945482a55d0fedddfc348e206/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d696368656e72696b73656e2f61717561746f6e65)](https://camo.githubusercontent.com/77fc16468efa954945482a55d0fedddfc348e206/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d696368656e72696b73656e2f61717561746f6e65) |
| Discovery/ALL | [lazyrecon](https://github.com/nahamsec/lazyrecon) | This script is intended to automate your reconnaissance process in an organized fashion | [![](https://camo.githubusercontent.com/ba29fc76824fe63b653ec43e39f0ad88032f0b19/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6e6168616d7365632f6c617a797265636f6e)](https://camo.githubusercontent.com/ba29fc76824fe63b653ec43e39f0ad88032f0b19/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6e6168616d7365632f6c617a797265636f6e) | [![](https://camo.githubusercontent.com/e3c880274f971588c3108a6a58d55c36ff7960f9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6e6168616d7365632f6c617a797265636f6e)](https://camo.githubusercontent.com/e3c880274f971588c3108a6a58d55c36ff7960f9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6e6168616d7365632f6c617a797265636f6e) |
| Discovery/CRAWL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. | [![](https://camo.githubusercontent.com/b015328c56b681049a3db824181e8b3f3ed6454e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f50686f746f6e)](https://camo.githubusercontent.com/b015328c56b681049a3db824181e8b3f3ed6454e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f50686f746f6e) | [![](https://camo.githubusercontent.com/acb1ecc294a8e92d4237c007c429d904ece07258/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f50686f746f6e)](https://camo.githubusercontent.com/acb1ecc294a8e92d4237c007c429d904ece07258/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f50686f746f6e) |
| Discovery/CRAWL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of “[commoncrawl.org](http://commoncrawl.org)” | [![](https://camo.githubusercontent.com/be49b9f5a491d2c7f2c5ed3368adbc71567acd33/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f736939696e742f63632e7079)](https://camo.githubusercontent.com/be49b9f5a491d2c7f2c5ed3368adbc71567acd33/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f736939696e742f63632e7079) | [![](https://camo.githubusercontent.com/a0b5ba8212c45fd0bad35601216883b2d958f04c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f736939696e742f63632e7079)](https://camo.githubusercontent.com/a0b5ba8212c45fd0bad35601216883b2d958f04c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f736939696e742f63632e7079) |
| Discovery/CRAWL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go | [![](https://camo.githubusercontent.com/14053e141b2071b267dbd072c5394a9a7112d1eb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a61656c65732d70726f6a6563742f676f737069646572)](https://camo.githubusercontent.com/14053e141b2071b267dbd072c5394a9a7112d1eb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a61656c65732d70726f6a6563742f676f737069646572) | [![](https://camo.githubusercontent.com/052bf0b4402858c8f50d7dc4d3c7453e690a264f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a61656c65732d70726f6a6563742f676f737069646572)](https://camo.githubusercontent.com/052bf0b4402858c8f50d7dc4d3c7453e690a264f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a61656c65732d70726f6a6563742f676f737069646572) |
| Discovery/CRAWL | [hakrawler](https://github.com/hakluke/hakrawler) | Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application | [![](https://camo.githubusercontent.com/335a96b359890882deb4702845ea5886bb74ba1a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616b6c756b652f68616b7261776c6572)](https://camo.githubusercontent.com/335a96b359890882deb4702845ea5886bb74ba1a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616b6c756b652f68616b7261776c6572) | [![](https://camo.githubusercontent.com/f0d7186492b6b7137597e6817a0e851c119767ef/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616b6c756b652f68616b7261776c6572)](https://camo.githubusercontent.com/f0d7186492b6b7137597e6817a0e851c119767ef/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616b6c756b652f68616b7261776c6572) |
| Discovery/DNS | [DNSDumpster](https://dnsdumpster.com/) | Online dns recon & research, find & lookup dns records | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Discovery/DNS | [SecurityTrails](https://securitytrails.com/) | Online dns / subdomain / recon tool | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Discovery/DNS | [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. | [![](https://camo.githubusercontent.com/70e2b0df7a3c6f2431c31fe3a0f3b4e5eb4e0bac/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f646e7370726f6265)](https://camo.githubusercontent.com/70e2b0df7a3c6f2431c31fe3a0f3b4e5eb4e0bac/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f646e7370726f6265) | [![](https://camo.githubusercontent.com/dd42a1cd4cb52f7d9e58b375d5def50f431cbc43/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f646e7370726f6265)](https://camo.githubusercontent.com/dd42a1cd4cb52f7d9e58b375d5def50f431cbc43/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f646e7370726f6265) |
| Discovery/DNS | [hakrevdns](https://github.com/hakluke/hakrevdns) | Small, fast tool for performing reverse DNS lookups en masse. | [![](https://camo.githubusercontent.com/8fb8ff1e497a9f30c08ba0ce1a066697ca7de5a7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616b6c756b652f68616b726576646e73)](https://camo.githubusercontent.com/8fb8ff1e497a9f30c08ba0ce1a066697ca7de5a7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616b6c756b652f68616b726576646e73) | [![](https://camo.githubusercontent.com/0595dc2c433ad45e4a3e080f07e1e9bc3a728348/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616b6c756b652f68616b726576646e73)](https://camo.githubusercontent.com/0595dc2c433ad45e4a3e080f07e1e9bc3a728348/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616b6c756b652f68616b726576646e73) |
| Discovery/DNS | [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. | [![](https://camo.githubusercontent.com/cd1a47f1104f0e3661a521201bc82fe6b937923e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f73687566666c65646e73)](https://camo.githubusercontent.com/cd1a47f1104f0e3661a521201bc82fe6b937923e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f73687566666c65646e73) | [![](https://camo.githubusercontent.com/24dccd29ca37fb77b4e346aedecb5843abca1bc4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f73687566666c65646e73)](https://camo.githubusercontent.com/24dccd29ca37fb77b4e346aedecb5843abca1bc4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f73687566666c65646e73) |
| Discovery/DOMAIN | [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery | [![](https://camo.githubusercontent.com/cefdea0d8a4e079d02464bdcfdaec1c22642d876/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4f574153502f416d617373)](https://camo.githubusercontent.com/cefdea0d8a4e079d02464bdcfdaec1c22642d876/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4f574153502f416d617373) | [![](https://camo.githubusercontent.com/73ec58b4fa55b17722c431171e4b1cd6e16a64bf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4f574153502f416d617373)](https://camo.githubusercontent.com/73ec58b4fa55b17722c431171e4b1cd6e16a64bf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4f574153502f416d617373) |
| Discovery/DOMAIN | [Sublist3r](https://github.com/aboul3la/Sublist3r) | Fast subdomains enumeration tool for penetration testers | [![](https://camo.githubusercontent.com/c0edbcd60eb4be75f2358062c83f1fb4420e81de/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f61626f756c336c612f5375626c6973743372)](https://camo.githubusercontent.com/c0edbcd60eb4be75f2358062c83f1fb4420e81de/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f61626f756c336c612f5375626c6973743372) | [![](https://camo.githubusercontent.com/3ea0f327845ba70e00f1d4c08871e1052539d3d3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f61626f756c336c612f5375626c6973743372)](https://camo.githubusercontent.com/3ea0f327845ba70e00f1d4c08871e1052539d3d3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f61626f756c336c612f5375626c6973743372) |
| Discovery/DOMAIN | [altdns](https://github.com/infosec-au/altdns) | Generates permutations, alterations and mutations of subdomains and then resolves them | [![](https://camo.githubusercontent.com/b427eec87eb708acbb32f562a6e4d0c5395a457f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f696e666f7365632d61752f616c74646e73)](https://camo.githubusercontent.com/b427eec87eb708acbb32f562a6e4d0c5395a457f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f696e666f7365632d61752f616c74646e73) | [![](https://camo.githubusercontent.com/7a3fcfd4cf1d0e568c220cc8f02ac877cae9a258/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f696e666f7365632d61752f616c74646e73)](https://camo.githubusercontent.com/7a3fcfd4cf1d0e568c220cc8f02ac877cae9a258/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f696e666f7365632d61752f616c74646e73) |
| Discovery/DOMAIN | [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain | [![](https://camo.githubusercontent.com/8bf142212f2ba36f25ced4c1b4079e52e0927303/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f617373657466696e646572)](https://camo.githubusercontent.com/8bf142212f2ba36f25ced4c1b4079e52e0927303/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f617373657466696e646572) | [![](https://camo.githubusercontent.com/449442bbd4a9d57905097dc50c93fc12a7527e63/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f617373657466696e646572)](https://camo.githubusercontent.com/449442bbd4a9d57905097dc50c93fc12a7527e63/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f617373657466696e646572) |
| Discovery/DOMAIN | [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. | [![](https://camo.githubusercontent.com/291b48d1b94d81ad167672c18038724e08bf2304/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f45647534726453484c2f66696e646f6d61696e)](https://camo.githubusercontent.com/291b48d1b94d81ad167672c18038724e08bf2304/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f45647534726453484c2f66696e646f6d61696e) | [![](https://camo.githubusercontent.com/47183448c81ce07aa15cba8eb2ca14267958d2af/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f45647534726453484c2f66696e646f6d61696e)](https://camo.githubusercontent.com/47183448c81ce07aa15cba8eb2ca14267958d2af/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f45647534726453484c2f66696e646f6d61696e) |
| Discovery/DOMAIN | [knock](https://github.com/guelfoweb/knock) | Knock Subdomain Scan | [![](https://camo.githubusercontent.com/510a42f8addb14a32d8c4f4c6bac20b6a5eaa75d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6775656c666f7765622f6b6e6f636b)](https://camo.githubusercontent.com/510a42f8addb14a32d8c4f4c6bac20b6a5eaa75d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6775656c666f7765622f6b6e6f636b) | [![](https://camo.githubusercontent.com/def38f4f3b7fb1a90d8905848f445d7d9e7a2bc5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6775656c666f7765622f6b6e6f636b)](https://camo.githubusercontent.com/def38f4f3b7fb1a90d8905848f445d7d9e7a2bc5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6775656c666f7765622f6b6e6f636b) |
| Discovery/DOMAIN | [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. | [![](https://camo.githubusercontent.com/ee776b05f4d4e55d793293e484d9196c5b52b494/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f73756266696e646572)](https://camo.githubusercontent.com/ee776b05f4d4e55d793293e484d9196c5b52b494/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f73756266696e646572) | [![](https://camo.githubusercontent.com/dd908fb51f13a3ee29b7e64444d3243c3c7afe2b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f73756266696e646572)](https://camo.githubusercontent.com/dd908fb51f13a3ee29b7e64444d3243c3c7afe2b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f73756266696e646572) |
| Discovery/FUZZ | [ParamSpider](https://github.com/devanshbatham/ParamSpider) | Mining parameters from dark corners of Web Archives | [![](https://camo.githubusercontent.com/8282503d106a7c8a30706997a1fe4c87f080be0c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f646576616e736862617468616d2f506172616d537069646572)](https://camo.githubusercontent.com/8282503d106a7c8a30706997a1fe4c87f080be0c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f646576616e736862617468616d2f506172616d537069646572) | [![](https://camo.githubusercontent.com/5ae911c7416b13c01ed986ca450162db7d00edbf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f646576616e736862617468616d2f506172616d537069646572)](https://camo.githubusercontent.com/5ae911c7416b13c01ed986ca450162db7d00edbf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f646576616e736862617468616d2f506172616d537069646572) |
| Discovery/FUZZ | [dirsearch](https://github.com/maurosoria/dirsearch) | Web path scanner | [![](https://camo.githubusercontent.com/81ba122f9f04ebcd1be322275ff222ffcbd11c62/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d6175726f736f7269612f646972736561726368)](https://camo.githubusercontent.com/81ba122f9f04ebcd1be322275ff222ffcbd11c62/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d6175726f736f7269612f646972736561726368) | [![](https://camo.githubusercontent.com/dd806075beb310b45e2d1acb50159939a46287aa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d6175726f736f7269612f646972736561726368)](https://camo.githubusercontent.com/dd806075beb310b45e2d1acb50159939a46287aa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d6175726f736f7269612f646972736561726368) |
| Discovery/FUZZ | [gobuster](https://github.com/OJ/gobuster) | Directory/File, DNS and VHost busting tool written in Go | [![](https://camo.githubusercontent.com/0edbc4d0a3b9df0e378816512e99bc2d3bcd247a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4f4a2f676f627573746572)](https://camo.githubusercontent.com/0edbc4d0a3b9df0e378816512e99bc2d3bcd247a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4f4a2f676f627573746572) | [![](https://camo.githubusercontent.com/1c6385a0e53ffcf3d08a877d2c9e3512804bb850/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4f4a2f676f627573746572)](https://camo.githubusercontent.com/1c6385a0e53ffcf3d08a877d2c9e3512804bb850/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4f4a2f676f627573746572) |
| Discovery/GIT | [GitMiner](https://github.com/UnkL4b/GitMiner) | Tool for advanced mining for content on Github | [![](https://camo.githubusercontent.com/f3b5b96add7e112826ff887589587156221e8446/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f556e6b4c34622f4769744d696e6572)](https://camo.githubusercontent.com/f3b5b96add7e112826ff887589587156221e8446/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f556e6b4c34622f4769744d696e6572) | [![](https://camo.githubusercontent.com/a0ca1b00b5144af2dea178056eeca21d530cc103/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f556e6b4c34622f4769744d696e6572)](https://camo.githubusercontent.com/a0ca1b00b5144af2dea178056eeca21d530cc103/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f556e6b4c34622f4769744d696e6572) |
| Discovery/GIT | [gitGraber](https://github.com/hisxo/gitGraber) | gitGraber | [![](https://camo.githubusercontent.com/95777148a1e7ada00f2091574635c3d7a57714a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f686973786f2f676974477261626572)](https://camo.githubusercontent.com/95777148a1e7ada00f2091574635c3d7a57714a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f686973786f2f676974477261626572) | [![](https://camo.githubusercontent.com/ff8fb1650a2322efd31f2cedefde8f345d35eb89/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f686973786f2f676974477261626572)](https://camo.githubusercontent.com/ff8fb1650a2322efd31f2cedefde8f345d35eb89/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f686973786f2f676974477261626572) |
| Discovery/GIT | [github-search](https://github.com/gwen001/github-search) | Tools to perform basic search on GitHub. | [![](https://camo.githubusercontent.com/06bf21304b51ff4b47cf29459a1ba9df7ec45a5a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6777656e3030312f6769746875622d736561726368)](https://camo.githubusercontent.com/06bf21304b51ff4b47cf29459a1ba9df7ec45a5a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6777656e3030312f6769746875622d736561726368) | [![](https://camo.githubusercontent.com/6b0a24df7233dd0752fb276f958f44b54ef974f6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6777656e3030312f6769746875622d736561726368)](https://camo.githubusercontent.com/6b0a24df7233dd0752fb276f958f44b54ef974f6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6777656e3030312f6769746875622d736561726368) |
| Discovery/GIT | [gitleaks](https://github.com/zricethezav/gitleaks) | Scan git repos for secrets using regex and entropy | [![](https://camo.githubusercontent.com/884e54d986cf15c0b0c1d9264320c7b69eeec397/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7a726963657468657a61762f6769746c65616b73)](https://camo.githubusercontent.com/884e54d986cf15c0b0c1d9264320c7b69eeec397/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7a726963657468657a61762f6769746c65616b73) | [![](https://camo.githubusercontent.com/c04053c7bdaad1903f5a6e189089334dc1b15d24/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7a726963657468657a61762f6769746c65616b73)](https://camo.githubusercontent.com/c04053c7bdaad1903f5a6e189089334dc1b15d24/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7a726963657468657a61762f6769746c65616b73) |
| Discovery/GIT | [gitrob](https://github.com/michenriksen/gitrob) | Reconnaissance tool for GitHub organizations | [![](https://camo.githubusercontent.com/c1d6b44953ee1d8d2073ce1fc09b3d1530abb6da/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d696368656e72696b73656e2f676974726f62)](https://camo.githubusercontent.com/c1d6b44953ee1d8d2073ce1fc09b3d1530abb6da/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d696368656e72696b73656e2f676974726f62) | [![](https://camo.githubusercontent.com/5ba719c4604d36bee350ad7cddc190d9440faa92/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d696368656e72696b73656e2f676974726f62)](https://camo.githubusercontent.com/5ba719c4604d36bee350ad7cddc190d9440faa92/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d696368656e72696b73656e2f676974726f62) |
| Discovery/HTTP | [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. | [![](https://camo.githubusercontent.com/a0641a03a617487cfffad06c67a8cf172f6fb844/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f41726a756e)](https://camo.githubusercontent.com/a0641a03a617487cfffad06c67a8cf172f6fb844/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f41726a756e) | [![](https://camo.githubusercontent.com/d58ee58152be0e50889f65edd275ae4dfd178790/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f41726a756e)](https://camo.githubusercontent.com/d58ee58152be0e50889f65edd275ae4dfd178790/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f41726a756e) |
| Discovery/PORT | [Shodan](https://www.shodan.io/) | World’s first search engine for Internet-connected devices | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Discovery/PORT | [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. | [![](https://camo.githubusercontent.com/a46c9e32a615583732da94b8a994183deb897b7f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f726f62657274646176696467726168616d2f6d61737363616e)](https://camo.githubusercontent.com/a46c9e32a615583732da94b8a994183deb897b7f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f726f62657274646176696467726168616d2f6d61737363616e) | [![](https://camo.githubusercontent.com/fef00ff95dfd4f962484d12cdcab7644ba757fa7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f726f62657274646176696467726168616d2f6d61737363616e)](https://camo.githubusercontent.com/fef00ff95dfd4f962484d12cdcab7644ba757fa7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f726f62657274646176696467726168616d2f6d61737363616e) |
| Discovery/PORT | [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests | [![](https://camo.githubusercontent.com/3bd0e28b1b8a42c0b54646f905528679296fb029/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f6e61616275)](https://camo.githubusercontent.com/3bd0e28b1b8a42c0b54646f905528679296fb029/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f6e61616275) | [![](https://camo.githubusercontent.com/7ba34a075f9be505eb19a16ecb14a1a1cff20857/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f6e61616275)](https://camo.githubusercontent.com/7ba34a075f9be505eb19a16ecb14a1a1cff20857/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f6e61616275) |
| Discovery/PORT | [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. | [![](https://camo.githubusercontent.com/bc2defb5b9c8c425baa4b70f0c2956250913ce2e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6e6d61702f6e6d6170)](https://camo.githubusercontent.com/bc2defb5b9c8c425baa4b70f0c2956250913ce2e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6e6d61702f6e6d6170) | [![](https://camo.githubusercontent.com/e2a362e18b81f4c086f1785f4f16272a429b87e6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6e6d61702f6e6d6170)](https://camo.githubusercontent.com/e2a362e18b81f4c086f1785f4f16272a429b87e6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6e6d61702f6e6d6170) |
| Discovery/TKOV | [subjack](https://github.com/haccer/subjack) | Subdomain Takeover tool written in Go | [![](https://camo.githubusercontent.com/bbecb38033ae85f67661a28573c8d7591e425e15/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6861636365722f7375626a61636b)](https://camo.githubusercontent.com/bbecb38033ae85f67661a28573c8d7591e425e15/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6861636365722f7375626a61636b) | [![](https://camo.githubusercontent.com/1e08ba98117af104ccd8d04d00380da76f05e0ba/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6861636365722f7375626a61636b)](https://camo.githubusercontent.com/1e08ba98117af104ccd8d04d00380da76f05e0ba/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6861636365722f7375626a61636b) |
| Discovery/URL | [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain | [![](https://camo.githubusercontent.com/1ae35a8189d58c635d3fd89ba87ac08d415c1806/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f7761796261636b75726c73)](https://camo.githubusercontent.com/1ae35a8189d58c635d3fd89ba87ac08d415c1806/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f7761796261636b75726c73) | [![](https://camo.githubusercontent.com/b972f5ea990395b77e1b14f4a74c3def20f5fb3e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f7761796261636b75726c73)](https://camo.githubusercontent.com/b972f5ea990395b77e1b14f4a74c3def20f5fb3e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f7761796261636b75726c73) |
| Discovery/VULN | [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services | [![](https://camo.githubusercontent.com/db14bf5da6019a58cb96fe42284d148ccb8d8b81/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f53696c766572)](https://camo.githubusercontent.com/db14bf5da6019a58cb96fe42284d148ccb8d8b81/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f53696c766572) | [![](https://camo.githubusercontent.com/5921fa94c1e39ff9b53be3cc2ba3565cf8edcd27/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f53696c766572)](https://camo.githubusercontent.com/5921fa94c1e39ff9b53be3cc2ba3565cf8edcd27/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f53696c766572) |
| Fetch/REPEAT | [wuzz](https://github.com/asciimoo/wuzz) | Interactive cli tool for HTTP inspection | [![](https://camo.githubusercontent.com/4d32fd8354e4bab67529adfee676a25ec837bc55/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f61736369696d6f6f2f77757a7a)](https://camo.githubusercontent.com/4d32fd8354e4bab67529adfee676a25ec837bc55/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f61736369696d6f6f2f77757a7a) | [![](https://camo.githubusercontent.com/0a248e2305d15e301c3e7fff85c79402f1117897/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f61736369696d6f6f2f77757a7a)](https://camo.githubusercontent.com/0a248e2305d15e301c3e7fff85c79402f1117897/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f61736369696d6f6f2f77757a7a) |
| Fetch/TOM | [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers | [![](https://camo.githubusercontent.com/f819a1fe8eb2fe68074507162a55f4b253ca2f73/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f68747470726f6265)](https://camo.githubusercontent.com/f819a1fe8eb2fe68074507162a55f4b253ca2f73/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f68747470726f6265) | [![](https://camo.githubusercontent.com/69a71a4d1574a025cf23ad926b466399b6a7a0b2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f68747470726f6265)](https://camo.githubusercontent.com/69a71a4d1574a025cf23ad926b466399b6a7a0b2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f68747470726f6265) |
| Fetch/TOM | [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts | [![](https://camo.githubusercontent.com/f8f4f0649fd70cea9432f0c83af6bd05715024ca/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6d6567)](https://camo.githubusercontent.com/f8f4f0649fd70cea9432f0c83af6bd05715024ca/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6d6567) | [![](https://camo.githubusercontent.com/53ad1f168b0840a8f619b954af8176234dc7020b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6d6567)](https://camo.githubusercontent.com/53ad1f168b0840a8f619b954af8176234dc7020b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6d6567) |
| Fetch/WSOCK | [websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) | websocket-connection-smuggler | [![](https://camo.githubusercontent.com/3c1ab1de4055959246f9b057614c1aa9962700bd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f776562736f636b65742d636f6e6e656374696f6e2d736d7567676c6572)](https://camo.githubusercontent.com/3c1ab1de4055959246f9b057614c1aa9962700bd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f776562736f636b65742d636f6e6e656374696f6e2d736d7567676c6572) | [![](https://camo.githubusercontent.com/c6fc81c68190e94eca13cc28f8a7eb7661ddbf96/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f776562736f636b65742d636f6e6e656374696f6e2d736d7567676c6572)](https://camo.githubusercontent.com/c6fc81c68190e94eca13cc28f8a7eb7661ddbf96/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f776562736f636b65742d636f6e6e656374696f6e2d736d7567676c6572) |
| Scanner/CORS | [Corsy](https://github.com/s0md3v/Corsy) | CORS Misconfiguration Scanner | [![](https://camo.githubusercontent.com/b43146d3297cc8d58c633519eaca031282590e94/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f436f727379)](https://camo.githubusercontent.com/b43146d3297cc8d58c633519eaca031282590e94/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f436f727379) | [![](https://camo.githubusercontent.com/25102943c850621b8748222ba3197b9f20b3c983/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f436f727379)](https://camo.githubusercontent.com/25102943c850621b8748222ba3197b9f20b3c983/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f436f727379) |
| Scanner/FUZZ | [Medusa](https://github.com/pymedusa/Medusa) | Automatic Video Library Manager for TV Shows. It watches for new episodes of your favorite shows, and when they are posted it does its magic. | [![](https://camo.githubusercontent.com/1d1b5c3e7fcdc08efcee0c7c7addcdc3f7c972cf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70796d65647573612f4d6564757361)](https://camo.githubusercontent.com/1d1b5c3e7fcdc08efcee0c7c7addcdc3f7c972cf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70796d65647573612f4d6564757361) | [![](https://camo.githubusercontent.com/58390e7ccc872dfbbc86058ac80aa758e8b317ee/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70796d65647573612f4d6564757361)](https://camo.githubusercontent.com/58390e7ccc872dfbbc86058ac80aa758e8b317ee/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70796d65647573612f4d6564757361) |
| Scanner/FUZZ | [VHostScan](https://github.com/codingo/VHostScan) | A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. | [![](https://camo.githubusercontent.com/0460eadacc70c75774d1e56f13142d7f351d5931/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f636f64696e676f2f56486f73745363616e)](https://camo.githubusercontent.com/0460eadacc70c75774d1e56f13142d7f351d5931/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f636f64696e676f2f56486f73745363616e) | [![](https://camo.githubusercontent.com/935bdab7b5896cfa53909217886cfe3709e9c39d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f636f64696e676f2f56486f73745363616e)](https://camo.githubusercontent.com/935bdab7b5896cfa53909217886cfe3709e9c39d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f636f64696e676f2f56486f73745363616e) |
| Scanner/FUZZ | [ffuf](https://github.com/ffuf/ffuf) | Fast web fuzzer written in Go | [![](https://camo.githubusercontent.com/ef8a40a742271f05025982ceb9c5cac9ebb46fa6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f666675662f66667566)](https://camo.githubusercontent.com/ef8a40a742271f05025982ceb9c5cac9ebb46fa6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f666675662f66667566) | [![](https://camo.githubusercontent.com/cf68b00b63318c5c9a6b10a23f5535cb883b161b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f666675662f66667566)](https://camo.githubusercontent.com/cf68b00b63318c5c9a6b10a23f5535cb883b161b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f666675662f66667566) |
| Scanner/FUZZ | [thc-hydra](https://github.com/vanhauser-thc/thc-hydra) | hydra | [![](https://camo.githubusercontent.com/0d21b0befab77643f5f94afce636ea70a27c4ac0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f76616e6861757365722d7468632f7468632d6879647261)](https://camo.githubusercontent.com/0d21b0befab77643f5f94afce636ea70a27c4ac0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f76616e6861757365722d7468632f7468632d6879647261) | [![](https://camo.githubusercontent.com/3c88a60d53100001252e0f3bd07ed0342dacc3f7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f76616e6861757365722d7468632f7468632d6879647261)](https://camo.githubusercontent.com/3c88a60d53100001252e0f3bd07ed0342dacc3f7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f76616e6861757365722d7468632f7468632d6879647261) |
| Scanner/FUZZ | [wfuzz](https://github.com/xmendez/wfuzz) | Web application fuzzer | [![](https://camo.githubusercontent.com/ae5bd97df81122e2206cf1a1790d168939c909ee/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f786d656e64657a2f7766757a7a)](https://camo.githubusercontent.com/ae5bd97df81122e2206cf1a1790d168939c909ee/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f786d656e64657a2f7766757a7a) | [![](https://camo.githubusercontent.com/a719b8a7d6bd13b9c0ce322f129384d2079cbdfc/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f786d656e64657a2f7766757a7a)](https://camo.githubusercontent.com/a719b8a7d6bd13b9c0ce322f129384d2079cbdfc/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f786d656e64657a2f7766757a7a) |
| Scanner/GQL | [GraphQLmap](https://github.com/swisskyrepo/GraphQLmap) | GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. | [![](https://camo.githubusercontent.com/56c10adf7df39935f0becadc9c59b77ea6b28e58/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73776973736b797265706f2f4772617068514c6d6170)](https://camo.githubusercontent.com/56c10adf7df39935f0becadc9c59b77ea6b28e58/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73776973736b797265706f2f4772617068514c6d6170) | [![](https://camo.githubusercontent.com/cfad5a89008d5ebda2fdc219bab71353b3a16e41/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73776973736b797265706f2f4772617068514c6d6170)](https://camo.githubusercontent.com/cfad5a89008d5ebda2fdc219bab71353b3a16e41/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73776973736b797265706f2f4772617068514c6d6170) |
| Scanner/LFI | [LFISuite](https://github.com/D35m0nd142/LFISuite) | Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner | [![](https://camo.githubusercontent.com/2af005e38552e5c62c0d0b0d04bd2323f7cccfff/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4433356d306e643134322f4c46495375697465)](https://camo.githubusercontent.com/2af005e38552e5c62c0d0b0d04bd2323f7cccfff/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4433356d306e643134322f4c46495375697465) | [![](https://camo.githubusercontent.com/05401dde19a9d29274d5820ab9dee29b37b0df65/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4433356d306e643134322f4c46495375697465)](https://camo.githubusercontent.com/05401dde19a9d29274d5820ab9dee29b37b0df65/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4433356d306e643134322f4c46495375697465) |
| Scanner/LFI | [dotdotpwn](https://github.com/wireghoul/dotdotpwn) | DotDotPwn - The Directory Traversal Fuzzer | [![](https://camo.githubusercontent.com/8c47d36cc204544c94d5d304453960d6e4f6491c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7769726567686f756c2f646f74646f7470776e)](https://camo.githubusercontent.com/8c47d36cc204544c94d5d304453960d6e4f6491c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7769726567686f756c2f646f74646f7470776e) | [![](https://camo.githubusercontent.com/d760a381735bdd26ce6c57600f77327490d565ac/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7769726567686f756c2f646f74646f7470776e)](https://camo.githubusercontent.com/d760a381735bdd26ce6c57600f77327490d565ac/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7769726567686f756c2f646f74646f7470776e) |
| Scanner/NOSQL | [NoSQLMap](https://github.com/codingo/NoSQLMap) | Automated NoSQL database enumeration and web application exploitation tool. | [![](https://camo.githubusercontent.com/9daf4cffc4bcb6f5bb6d7d995441d73446164de3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f636f64696e676f2f4e6f53514c4d6170)](https://camo.githubusercontent.com/9daf4cffc4bcb6f5bb6d7d995441d73446164de3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f636f64696e676f2f4e6f53514c4d6170) | [![](https://camo.githubusercontent.com/a8a194e678ff51a862fa69c7c21dfb531c9d94a7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f636f64696e676f2f4e6f53514c4d6170)](https://camo.githubusercontent.com/a8a194e678ff51a862fa69c7c21dfb531c9d94a7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f636f64696e676f2f4e6f53514c4d6170) |
| Scanner/RECON | [Osmedeus](https://github.com/j3ssie/Osmedeus) | Fully automated offensive security framework for reconnaissance and vulnerability scanning | [![](https://camo.githubusercontent.com/371e2dae0573a88084025c045add632b5093b3fa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a33737369652f4f736d6564657573)](https://camo.githubusercontent.com/371e2dae0573a88084025c045add632b5093b3fa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a33737369652f4f736d6564657573) | [![](https://camo.githubusercontent.com/c93814af2f6a47c2a9ad2d27abd5a79a6300f148/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a33737369652f4f736d6564657573)](https://camo.githubusercontent.com/c93814af2f6a47c2a9ad2d27abd5a79a6300f148/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a33737369652f4f736d6564657573) |
| Scanner/RECON | [Sn1per](https://github.com/1N3/Sn1per) | Automated pentest framework for offensive security experts | [![](https://camo.githubusercontent.com/555622051531f8289d80fd4b0029d0181e1240a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f314e332f536e31706572)](https://camo.githubusercontent.com/555622051531f8289d80fd4b0029d0181e1240a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f314e332f536e31706572) | [![](https://camo.githubusercontent.com/54b6c2c789061a9f75702d26199565ee53e91bb1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f314e332f536e31706572)](https://camo.githubusercontent.com/54b6c2c789061a9f75702d26199565ee53e91bb1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f314e332f536e31706572) |
| Scanner/RECON | [megplus](https://github.com/EdOverflow/megplus) | Automated reconnaissance wrapper — TomNomNom’s meg on steroids. [DEPRECATED] | [![](https://camo.githubusercontent.com/b01f178ffb76b7efcee8a7628ca6eb4614de8042/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f45644f766572666c6f772f6d6567706c7573)](https://camo.githubusercontent.com/b01f178ffb76b7efcee8a7628ca6eb4614de8042/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f45644f766572666c6f772f6d6567706c7573) | [![](https://camo.githubusercontent.com/d98aa93f8a755f6bfc2e0e7cadf5b67be4588fdb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f45644f766572666c6f772f6d6567706c7573)](https://camo.githubusercontent.com/d98aa93f8a755f6bfc2e0e7cadf5b67be4588fdb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f45644f766572666c6f772f6d6567706c7573) |
| Scanner/S3 | [S3Scanner](https://github.com/sa7mon/S3Scanner) | Scan for open AWS S3 buckets and dump the contents | [![](https://camo.githubusercontent.com/b37fa28e3946b084e79a2c43d9c16b7051a53c06/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7361376d6f6e2f53335363616e6e6572)](https://camo.githubusercontent.com/b37fa28e3946b084e79a2c43d9c16b7051a53c06/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7361376d6f6e2f53335363616e6e6572) | [![](https://camo.githubusercontent.com/a1aa47ed912d630ee886c7aafee73cd52eeed4e6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7361376d6f6e2f53335363616e6e6572)](https://camo.githubusercontent.com/a1aa47ed912d630ee886c7aafee73cd52eeed4e6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7361376d6f6e2f53335363616e6e6572) |
| Scanner/SQL | [SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja) | SQL Injection scanner | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Scanner/SQL | [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool | [![](https://camo.githubusercontent.com/02cf955eebd79d18058059266a8977793d4e72d2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73716c6d617070726f6a6563742f73716c6d6170)](https://camo.githubusercontent.com/02cf955eebd79d18058059266a8977793d4e72d2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73716c6d617070726f6a6563742f73716c6d6170) | [![](https://camo.githubusercontent.com/49266498ed4be8dd8a0e8086902f576efa79a430/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73716c6d617070726f6a6563742f73716c6d6170)](https://camo.githubusercontent.com/49266498ed4be8dd8a0e8086902f576efa79a430/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73716c6d617070726f6a6563742f73716c6d6170) |
| Scanner/SSL | [a2sv](https://github.com/hahwul/a2sv) | Auto Scanning to SSL Vulnerability | [![](https://camo.githubusercontent.com/a571d05ab23c9ce8b6cc0b2f8e33bb9b1ca52cab/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f61327376)](https://camo.githubusercontent.com/a571d05ab23c9ce8b6cc0b2f8e33bb9b1ca52cab/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f61327376) | [![](https://camo.githubusercontent.com/e0b8d8d42c0113fdb79e25454e39dacd983508ab/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f61327376)](https://camo.githubusercontent.com/e0b8d8d42c0113fdb79e25454e39dacd983508ab/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f61327376) |
| Scanner/SSL | [testssl.sh](https://github.com/drwetter/testssl.sh) | Testing TLS/SSL encryption anywhere on any port | [![](https://camo.githubusercontent.com/020261285da4800cec03c0924ca9c9120f9e1ead/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f64727765747465722f7465737473736c2e7368)](https://camo.githubusercontent.com/020261285da4800cec03c0924ca9c9120f9e1ead/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f64727765747465722f7465737473736c2e7368) | [![](https://camo.githubusercontent.com/8f24945a9cff32cc0509f6b93101a482b8ccaa7a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f64727765747465722f7465737473736c2e7368)](https://camo.githubusercontent.com/8f24945a9cff32cc0509f6b93101a482b8ccaa7a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f64727765747465722f7465737473736c2e7368) |
| Scanner/SSRF | [SSRFmap](https://github.com/swisskyrepo/SSRFmap) | Automatic SSRF fuzzer and exploitation tool | [![](https://camo.githubusercontent.com/d35310ebe37ad8fe29da5f5ed88aa22cb1391bc1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73776973736b797265706f2f535352466d6170)](https://camo.githubusercontent.com/d35310ebe37ad8fe29da5f5ed88aa22cb1391bc1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73776973736b797265706f2f535352466d6170) | [![](https://camo.githubusercontent.com/eb10e42b817819d3665ef69ebe60a7dbbf999dd6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73776973736b797265706f2f535352466d6170)](https://camo.githubusercontent.com/eb10e42b817819d3665ef69ebe60a7dbbf999dd6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73776973736b797265706f2f535352466d6170) |
| Scanner/SSRF | [ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) | A simple SSRF-testing sheriff written in Go | [![](https://camo.githubusercontent.com/146f1b0602adbb809e8473b76731755db25c02c8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f74656b6e6f6765656b2f737372662d73686572696666)](https://camo.githubusercontent.com/146f1b0602adbb809e8473b76731755db25c02c8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f74656b6e6f6765656b2f737372662d73686572696666) | [![](https://camo.githubusercontent.com/384764aa57fe1878682c9fb9a0c363ac3a8b2ed7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f74656b6e6f6765656b2f737372662d73686572696666)](https://camo.githubusercontent.com/384764aa57fe1878682c9fb9a0c363ac3a8b2ed7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f74656b6e6f6765656b2f737372662d73686572696666) |
| Scanner/WP | [wpscan](https://github.com/wpscanteam/wpscan) | WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. | [![](https://camo.githubusercontent.com/0fe994de2a447575310add0c9e88ae63ab823ec7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f77707363616e7465616d2f77707363616e)](https://camo.githubusercontent.com/0fe994de2a447575310add0c9e88ae63ab823ec7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f77707363616e7465616d2f77707363616e) | [![](https://camo.githubusercontent.com/927f86bafc08b4ebc9f42fe6a7d43e36470dc05d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f77707363616e7465616d2f77707363616e)](https://camo.githubusercontent.com/927f86bafc08b4ebc9f42fe6a7d43e36470dc05d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f77707363616e7465616d2f77707363616e) |
| Scanner/WVS | [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. | [![](https://camo.githubusercontent.com/35dd72020967493e43ae5e9cfc47870f4aed9882/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f537472696b6572)](https://camo.githubusercontent.com/35dd72020967493e43ae5e9cfc47870f4aed9882/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f537472696b6572) | [![](https://camo.githubusercontent.com/088556e03d135938f7b0fe7ec03ef7f57996fad7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f537472696b6572)](https://camo.githubusercontent.com/088556e03d135938f7b0fe7ec03ef7f57996fad7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f537472696b6572) |
| Scanner/WVS | [arachni](https://github.com/Arachni/arachni) | Web Application Security Scanner Framework | [![](https://camo.githubusercontent.com/edc76ce93f411b4e6b2f504b71797247f95b655c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f41726163686e692f61726163686e69)](https://camo.githubusercontent.com/edc76ce93f411b4e6b2f504b71797247f95b655c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f41726163686e692f61726163686e69) | [![](https://camo.githubusercontent.com/bfa8a2ac779aaed794a4910185cd0d6196b8a83b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f41726163686e692f61726163686e69)](https://camo.githubusercontent.com/bfa8a2ac779aaed794a4910185cd0d6196b8a83b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f41726163686e692f61726163686e69) |
| Scanner/WVS | [nikto](https://github.com/sullo/nikto) | Nikto web server scanner | [![](https://camo.githubusercontent.com/051397bb2e572bd8496bbe63b8f888d2aa789c55/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73756c6c6f2f6e696b746f)](https://camo.githubusercontent.com/051397bb2e572bd8496bbe63b8f888d2aa789c55/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73756c6c6f2f6e696b746f) | [![](https://camo.githubusercontent.com/ad36de6d0634dd32ec9758a3b3d07025e82680a3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73756c6c6f2f6e696b746f)](https://camo.githubusercontent.com/ad36de6d0634dd32ec9758a3b3d07025e82680a3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73756c6c6f2f6e696b746f) |
| Scanner/WVS | [rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner. | [![](https://camo.githubusercontent.com/c9b0d12ff7eb7d0aca4cf6526d6c8f422accab37/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f736b61766e67722f72617069647363616e)](https://camo.githubusercontent.com/c9b0d12ff7eb7d0aca4cf6526d6c8f422accab37/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f736b61766e67722f72617069647363616e) | [![](https://camo.githubusercontent.com/52d2aff6762c0af61e2c7b51ef8a1a4538e6402a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f736b61766e67722f72617069647363616e)](https://camo.githubusercontent.com/52d2aff6762c0af61e2c7b51ef8a1a4538e6402a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f736b61766e67722f72617069647363616e) |
| Scanner/WVS | [zap-cli](https://github.com/Grunny/zap-cli) | A simple tool for interacting with OWASP ZAP from the commandline. | [![](https://camo.githubusercontent.com/33b5a8bac6f3c1b7ac7de780dc54c8b582809564/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4772756e6e792f7a61702d636c69)](https://camo.githubusercontent.com/33b5a8bac6f3c1b7ac7de780dc54c8b582809564/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4772756e6e792f7a61702d636c69) | [![](https://camo.githubusercontent.com/1b56b68df83e23bd4ac5a6060b93b63c5fa7e84b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4772756e6e792f7a61702d636c69)](https://camo.githubusercontent.com/1b56b68df83e23bd4ac5a6060b93b63c5fa7e84b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4772756e6e792f7a61702d636c69) |
| Scanner/XSS | [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. | [![](https://camo.githubusercontent.com/be7ef03d56e7ddc1ed88195c1d4182350a4d16ee/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f5853537472696b65)](https://camo.githubusercontent.com/be7ef03d56e7ddc1ed88195c1d4182350a4d16ee/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f5853537472696b65) | [![](https://camo.githubusercontent.com/69f24a8697240c16f8620726a6821cdbc5096842/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f5853537472696b65)](https://camo.githubusercontent.com/69f24a8697240c16f8620726a6821cdbc5096842/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f5853537472696b65) |
| Scanner/XSS | [XSpear](https://github.com/hahwul/XSpear) | Powerfull XSS Scanning and Parameter analysis tool&gem | [![](https://camo.githubusercontent.com/42059f35142770cb2af5ba22cfedde1523502a95/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f585370656172)](https://camo.githubusercontent.com/42059f35142770cb2af5ba22cfedde1523502a95/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f585370656172) | [![](https://camo.githubusercontent.com/1f616c8c64ec142afdec5c44fd810cf5d02ea4e0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f585370656172)](https://camo.githubusercontent.com/1f616c8c64ec142afdec5c44fd810cf5d02ea4e0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f585370656172) |
| Scanner/XSS | [dalfox](https://github.com/hahwul/dalfox) | DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang | [![](https://camo.githubusercontent.com/015d0668698fc911a5a11d07c5eb443975574ca1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f64616c666f78)](https://camo.githubusercontent.com/015d0668698fc911a5a11d07c5eb443975574ca1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f64616c666f78) | [![](https://camo.githubusercontent.com/19fd51b5011226cefd4f367bd85171a621c9a0df/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f64616c666f78)](https://camo.githubusercontent.com/19fd51b5011226cefd4f367bd85171a621c9a0df/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f64616c666f78) |
| Scanner/XSS | [ezXSS](https://github.com/ssl/ezXSS) | ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. | [![](https://camo.githubusercontent.com/dce3b8e4006bb0675abd7c09f273b10603006c9f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73736c2f657a585353)](https://camo.githubusercontent.com/dce3b8e4006bb0675abd7c09f273b10603006c9f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73736c2f657a585353) | [![](https://camo.githubusercontent.com/1c3a1674f722e80134cf86ed9c073e1368ec11ef/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73736c2f657a585353)](https://camo.githubusercontent.com/1c3a1674f722e80134cf86ed9c073e1368ec11ef/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73736c2f657a585353) |
| Scanner/XSS | [xsser](https://github.com/epsylon/xsser) | Cross Site “Scripter” (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. | [![](https://camo.githubusercontent.com/9ef4199444d0a0a0d6a0a7133f2d2281a386cffb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f657073796c6f6e2f7873736572)](https://camo.githubusercontent.com/9ef4199444d0a0a0d6a0a7133f2d2281a386cffb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f657073796c6f6e2f7873736572) | [![](https://camo.githubusercontent.com/f66e48e8ac1b840507e6246a8b06c77492173cfa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f657073796c6f6e2f7873736572)](https://camo.githubusercontent.com/f66e48e8ac1b840507e6246a8b06c77492173cfa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f657073796c6f6e2f7873736572) |
| Utility/CSP | [CSP Evaluator](https://csp-evaluator.withgoogle.com/) | Online CSP Evaluator from google | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Utility/ENV | [Gf-Patterns](https://github.com/1ndianl33t/Gf-Patterns) | GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug\_logic) parameters grep | [![](https://camo.githubusercontent.com/3275e91e944fbfbaf627f819bda84f646b1771d7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f316e6469616e6c3333742f47662d5061747465726e73)](https://camo.githubusercontent.com/3275e91e944fbfbaf627f819bda84f646b1771d7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f316e6469616e6c3333742f47662d5061747465726e73) | [![](https://camo.githubusercontent.com/7e967dc52a6e11663061361c5d1adef2e49d98b1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f316e6469616e6c3333742f47662d5061747465726e73)](https://camo.githubusercontent.com/7e967dc52a6e11663061361c5d1adef2e49d98b1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f316e6469616e6c3333742f47662d5061747465726e73) |
| Utility/ENV | [recon\_profile](https://github.com/nahamsec/recon_profile) | Recon profile (bash profile) for bugbounty | [![](https://camo.githubusercontent.com/b328e7bee6d4fa1d5c20a4a9e35834407fb8b380/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6e6168616d7365632f7265636f6e5f70726f66696c65)](https://camo.githubusercontent.com/b328e7bee6d4fa1d5c20a4a9e35834407fb8b380/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6e6168616d7365632f7265636f6e5f70726f66696c65) | [![](https://camo.githubusercontent.com/155ab46b13a57db9a76176a56691f55605b5eada/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6e6168616d7365632f7265636f6e5f70726f66696c65)](https://camo.githubusercontent.com/155ab46b13a57db9a76176a56691f55605b5eada/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6e6168616d7365632f7265636f6e5f70726f66696c65) |
| Utility/ETC | [Phoenix](https://www.hahwul.com/p/phoenix.html) | hahwul’s online tools | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Utility/FIND | [fzf](https://github.com/junegunn/fzf) | A command-line fuzzy finder | [![](https://camo.githubusercontent.com/ac40d0701530982c23439150754b35482575b205/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a756e6567756e6e2f667a66)](https://camo.githubusercontent.com/ac40d0701530982c23439150754b35482575b205/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a756e6567756e6e2f667a66) | [![](https://camo.githubusercontent.com/65bd6c761a303cf280ee6af38031f547a148a37e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a756e6567756e6e2f667a66)](https://camo.githubusercontent.com/65bd6c761a303cf280ee6af38031f547a148a37e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a756e6567756e6e2f667a66) |
| Utility/FLOW | [SequenceDiagram](https://sequencediagram.org/) | Online tool for creating UML sequence diagrams | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) | [![](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179)](https://camo.githubusercontent.com/b596bb143094beccebd3f91ad5af6b766fc00694/68747470733a2f2f696d672e736869656c64732e696f2f7374617469632f76313f6c6162656c3d266d6573736167653d6974253237732532306e6f7425323067697468756226636f6c6f723d67726179) |
| Utility/GREP | [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things | [![](https://camo.githubusercontent.com/17aafca49be2acbc5bda6752c8a7dd26bdf31df3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6766)](https://camo.githubusercontent.com/17aafca49be2acbc5bda6752c8a7dd26bdf31df3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6766) | [![](https://camo.githubusercontent.com/4b2f5b40169d8bedf1d8fddfc0d22f206bb57b19/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6766)](https://camo.githubusercontent.com/4b2f5b40169d8bedf1d8fddfc0d22f206bb57b19/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6766) |
| Utility/JSON | [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! | [![](https://camo.githubusercontent.com/84a5347932d00341775f04c8468a398ea4ecbeba/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f67726f6e)](https://camo.githubusercontent.com/84a5347932d00341775f04c8468a398ea4ecbeba/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f67726f6e) | [![](https://camo.githubusercontent.com/45b517bc7f34e1273804c724f500fe7ef3c85084/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f67726f6e)](https://camo.githubusercontent.com/45b517bc7f34e1273804c724f500fe7ef3c85084/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f67726f6e) |
| Utility/PAYLOAD | [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings) | A list of useful payloads and bypass for Web Application Security and Pentest/CTF | [![](https://camo.githubusercontent.com/9afedfa116710ecd7d24a9fc30ebb304de243983/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73776973736b797265706f2f5061796c6f616473416c6c5468655468696e6773)](https://camo.githubusercontent.com/9afedfa116710ecd7d24a9fc30ebb304de243983/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73776973736b797265706f2f5061796c6f616473416c6c5468655468696e6773) | [![](https://camo.githubusercontent.com/24f171ceaa08edf9f14c7c589df374c1d7075f4b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73776973736b797265706f2f5061796c6f616473416c6c5468655468696e6773)](https://camo.githubusercontent.com/24f171ceaa08edf9f14c7c589df374c1d7075f4b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73776973736b797265706f2f5061796c6f616473416c6c5468655468696e6773) |
| Utility/S3 | [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. | [![](https://camo.githubusercontent.com/f9b55c4d224c13fd1cc7a8e8ea0a8bfd4e85e699/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f733372657665727365)](https://camo.githubusercontent.com/f9b55c4d224c13fd1cc7a8e8ea0a8bfd4e85e699/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f733372657665727365) | [![](https://camo.githubusercontent.com/621029597a058b3869d830c8bde50492280e2ac7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f733372657665727365)](https://camo.githubusercontent.com/621029597a058b3869d830c8bde50492280e2ac7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f733372657665727365) |
| Utility/SHOT | [gowitness](https://github.com/sensepost/gowitness) | gowitness - a golang, web screenshot utility using Chrome Headless | [![](https://camo.githubusercontent.com/24d4348b30643728af931aec0a2b19f396abb64f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73656e7365706f73742f676f7769746e657373)](https://camo.githubusercontent.com/24d4348b30643728af931aec0a2b19f396abb64f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73656e7365706f73742f676f7769746e657373) | [![](https://camo.githubusercontent.com/d79fee58f4658c554083392903fd90786d0282f4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73656e7365706f73742f676f7769746e657373)](https://camo.githubusercontent.com/d79fee58f4658c554083392903fd90786d0282f4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73656e7365706f73742f676f7769746e657373) |
| Utility/TEMPLATE | [bountyplz](https://github.com/fransr/bountyplz) | Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) | [![](https://camo.githubusercontent.com/093eed6eacdb0206bc4b3d1a949130890b49f7b5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6672616e73722f626f756e7479706c7a)](https://camo.githubusercontent.com/093eed6eacdb0206bc4b3d1a949130890b49f7b5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6672616e73722f626f756e7479706c7a) | [![](https://camo.githubusercontent.com/398f2d99b4f071b8c376ab57e3c3aeede562a314/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6672616e73722f626f756e7479706c7a)](https://camo.githubusercontent.com/398f2d99b4f071b8c376ab57e3c3aeede562a314/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6672616e73722f626f756e7479706c7a) |
| Utility/TEMPLATE | [template-generator](https://github.com/fransr/template-generator) | A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. | [![](https://camo.githubusercontent.com/8178cff7ed8e9194795ba225d2e65a51763a48b8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6672616e73722f74656d706c6174652d67656e657261746f72)](https://camo.githubusercontent.com/8178cff7ed8e9194795ba225d2e65a51763a48b8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6672616e73722f74656d706c6174652d67656e657261746f72) | [![](https://camo.githubusercontent.com/5ea671a3504b7742576c3bc32f219e0dad0905de/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6672616e73722f74656d706c6174652d67656e657261746f72)](https://camo.githubusercontent.com/5ea671a3504b7742576c3bc32f219e0dad0905de/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6672616e73722f74656d706c6174652d67656e657261746f72) |
| Utility/URL | [anew](https://github.com/tomnomnom/anew) | A tool for adding new lines to files, skipping duplicates | [![](https://camo.githubusercontent.com/87b97b408f8e8314ca12e428cfffcd07ac597c8f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f616e6577)](https://camo.githubusercontent.com/87b97b408f8e8314ca12e428cfffcd07ac597c8f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f616e6577) | [![](https://camo.githubusercontent.com/64c6a6a6ff4234eb850b5cc03d1109337bfbb4e0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f616e6577)](https://camo.githubusercontent.com/64c6a6a6ff4234eb850b5cc03d1109337bfbb4e0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f616e6577) |
| Utility/URL | [burl](https://github.com/tomnomnom/burl) | A Broken-URL Checker | [![](https://camo.githubusercontent.com/be1cedea5967eff8b6cf6e7c4c8094be2ff6ed50/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6275726c)](https://camo.githubusercontent.com/be1cedea5967eff8b6cf6e7c4c8094be2ff6ed50/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6275726c) | [![](https://camo.githubusercontent.com/5131c0b905af3ee0b6eb22a8f7f7f7d623667835/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6275726c)](https://camo.githubusercontent.com/5131c0b905af3ee0b6eb22a8f7f7f7d623667835/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6275726c) |
| Utility/URL | [gau](https://github.com/lc/gau) | Fetch known URLs from AlienVault’s Open Threat Exchange, the Wayback Machine, and Common Crawl. | [![](https://camo.githubusercontent.com/fdd37e0a98ad41ee85260151df2df2dcc4d15837/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6c632f676175)](https://camo.githubusercontent.com/fdd37e0a98ad41ee85260151df2df2dcc4d15837/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6c632f676175) | [![](https://camo.githubusercontent.com/dca36a9cf73bb1d0e50129735fd18992eb4ae6c3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6c632f676175)](https://camo.githubusercontent.com/dca36a9cf73bb1d0e50129735fd18992eb4ae6c3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6c632f676175) |
| Utility/URL | [hacks](https://github.com/tomnomnom/hacks/tree/master/anti-burl) | remove bad urls | [![](https://camo.githubusercontent.com/c394d1ca1437c3a3bc74d1f8b596e3ec7974c682/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6861636b732f747265652f6d61737465722f616e74692d6275726c)](https://camo.githubusercontent.com/c394d1ca1437c3a3bc74d1f8b596e3ec7974c682/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6861636b732f747265652f6d61737465722f616e74692d6275726c) | [![](https://camo.githubusercontent.com/5145a4fcc710c56c9e76a46eaffd97c0fc86f810/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6861636b732f747265652f6d61737465722f616e74692d6275726c)](https://camo.githubusercontent.com/5145a4fcc710c56c9e76a46eaffd97c0fc86f810/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6861636b732f747265652f6d61737465722f616e74692d6275726c) |
| Utility/URL | [qsreplace](https://github.com/tomnomnom/qsreplace) | Accept URLs on stdin, replace all query string values with a user-supplied value | [![](https://camo.githubusercontent.com/4b0946be9f27c9e6986055cc33e8ffff44d80f11/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f71737265706c616365)](https://camo.githubusercontent.com/4b0946be9f27c9e6986055cc33e8ffff44d80f11/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f71737265706c616365) | [![](https://camo.githubusercontent.com/9d8b144c72552f24264e7e1f5a78606e4458dc79/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f71737265706c616365)](https://camo.githubusercontent.com/9d8b144c72552f24264e7e1f5a78606e4458dc79/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f71737265706c616365) |
| Utility/URL | [unfurl](https://github.com/tomnomnom/unfurl) | Pull out bits of URLs provided on stdin | [![](https://camo.githubusercontent.com/bfb2f50ac046df7e6668371f83d7f736ef36e44c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f756e6675726c)](https://camo.githubusercontent.com/bfb2f50ac046df7e6668371f83d7f736ef36e44c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f756e6675726c) | [![](https://camo.githubusercontent.com/141252af51c01f197ae190603a4a7adc059dcbed/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f756e6675726c)](https://camo.githubusercontent.com/141252af51c01f197ae190603a4a7adc059dcbed/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f756e6675726c) |
| Utility/VULN | [Gopherus](https://github.com/tarunkant/Gopherus) | This tool generates gopher link for exploiting SSRF and gaining RCE in various servers | [![](https://camo.githubusercontent.com/7b7cd290fd6d6cede0d04551c1360b8cb6d2e68d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746172756e6b616e742f476f706865727573)](https://camo.githubusercontent.com/7b7cd290fd6d6cede0d04551c1360b8cb6d2e68d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746172756e6b616e742f476f706865727573) | [![](https://camo.githubusercontent.com/ecb209f309346bfa26d716fedf7c433ae2ba3997/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746172756e6b616e742f476f706865727573)](https://camo.githubusercontent.com/ecb209f309346bfa26d716fedf7c433ae2ba3997/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746172756e6b616e742f476f706865727573) |
| Utility/VULN | [oxml\_xxe](https://github.com/BuffaloWill/oxml_xxe) | A tool for embedding XXE/XML exploits into different filetypes | [![](https://camo.githubusercontent.com/698a61ecd9b215503857866b51294a299d3660c0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f42756666616c6f57696c6c2f6f786d6c5f787865)](https://camo.githubusercontent.com/698a61ecd9b215503857866b51294a299d3660c0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f42756666616c6f57696c6c2f6f786d6c5f787865) | [![](https://camo.githubusercontent.com/f44e0f8e0de1066e028c74163e09dae138d34253/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f42756666616c6f57696c6c2f6f786d6c5f787865)](https://camo.githubusercontent.com/f44e0f8e0de1066e028c74163e09dae138d34253/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f42756666616c6f57696c6c2f6f786d6c5f787865) |
| Utility/VULN | [pentest-tools](https://github.com/gwen001/pentest-tools) | Custom pentesting tools | [![](https://camo.githubusercontent.com/b546d16ee5ccaef3907eadadbce4648458dc86e2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6777656e3030312f70656e746573742d746f6f6c73)](https://camo.githubusercontent.com/b546d16ee5ccaef3907eadadbce4648458dc86e2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6777656e3030312f70656e746573742d746f6f6c73) | [![](https://camo.githubusercontent.com/a90909603963a721648353c0894e237311777e1d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6777656e3030312f70656e746573742d746f6f6c73)](https://camo.githubusercontent.com/a90909603963a721648353c0894e237311777e1d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6777656e3030312f70656e746573742d746f6f6c73) |
| Utility/VULN | [postMessage-tracker](https://github.com/fransr/postMessage-tracker) | A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon | [![](https://camo.githubusercontent.com/cbf4c92543189b3561a7cf0a6b83ad23137669c4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6672616e73722f706f73744d6573736167652d747261636b6572)](https://camo.githubusercontent.com/cbf4c92543189b3561a7cf0a6b83ad23137669c4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6672616e73722f706f73744d6573736167652d747261636b6572) | [![](https://camo.githubusercontent.com/ffe66979e7662f75b88011245420c0519ade48ba/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6672616e73722f706f73744d6573736167652d747261636b6572)](https://camo.githubusercontent.com/ffe66979e7662f75b88011245420c0519ade48ba/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6672616e73722f706f73744d6573736167652d747261636b6572) |
| Utility/VULN | [ysoserial](https://github.com/frohoff/ysoserial) | A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. | [![](https://camo.githubusercontent.com/bf41e3c11cd87a7d9655167f78bb1f1e97b09c8c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f66726f686f66662f79736f73657269616c)](https://camo.githubusercontent.com/bf41e3c11cd87a7d9655167f78bb1f1e97b09c8c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f66726f686f66662f79736f73657269616c) | [![](https://camo.githubusercontent.com/1ce3082d9cd8c7c69a20099d2b015273df5e7658/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f66726f686f66662f79736f73657269616c)](https://camo.githubusercontent.com/1ce3082d9cd8c7c69a20099d2b015273df5e7658/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f66726f686f66662f79736f73657269616c) |
| Utility/WORD | [SecLists](https://github.com/danielmiessler/SecLists) | SecLists is the security tester’s companion. It’s a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. | [![](https://camo.githubusercontent.com/33d4d9e77a7bf242c629915cb501fb799451681c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f64616e69656c6d696573736c65722f5365634c69737473)](https://camo.githubusercontent.com/33d4d9e77a7bf242c629915cb501fb799451681c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f64616e69656c6d696573736c65722f5365634c69737473) | [![](https://camo.githubusercontent.com/2b5acf6fb355e8d6ac26c5563599556716e1f9ae/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f64616e69656c6d696573736c65722f5365634c69737473)](https://camo.githubusercontent.com/2b5acf6fb355e8d6ac26c5563599556716e1f9ae/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f64616e69656c6d696573736c65722f5365634c69737473) |

### Usage of add-tool

```auto
./add-tool
Usage of ./add-tool:
  -isFirst
    	if you add new type, it use
  -url string
    	any url

```

### Three Procedures for the Contribute

- First, your tool append `data.json` using `add-tool

```auto
$ ./add-tool -url https://github.com/sqlmapproject/sqlmap
Successfully Opened type.lst
[0] Army-Knife
[1] Discovery
[2] Fetch
[3] Scanner
[4] Utility
[+] What is type?
3
Scanner
[+] What is method(e.g XSS, WVS, SSL, ETC..)?
SQL
Successfully Opened data.json

```

- Second, Give me PR or Add issue with data.json

- Third, There’s no third.

### Add common tools

in `WebHackersWeapons` directory

```auto
$ ./add-tool -url https://github.com/hahwul/s3reverse

```

### Add Burp Suite or ZAP Extensions

in `WebHackersWeapons/Burp and ZAP Extensions` directory

```auto
$ ../add-tool -url https://github.com/nccgroup/BurpSuiteLoggerPlusPlus

```

### Asciinema video

[![asciicast](https://camo.githubusercontent.com/b83b2f080f409f85c3edf897265c2b7c7411d8ee/68747470733a2f2f61736369696e656d612e6f72672f612f3331383435362e737667)](https://asciinema.org/a/318456)

For the credits, check the source at:

[https://github.com/hahwul/WebHackersWeapons](https://github.com/hahwul/WebHackersWeapons)

---

<div class="post-metadata">

**Author:** ![Sarah](https://onehack.st/user_avatar/onehack.st/sarah/32/166974_2.png) [@Sarah](https://onehack.st/u/Sarah)\
**Post date:** [May 22, 2020, 11:39pm UTC](https://onehack.st/t/web-hackers-weapons-cool-tools-used-by-web-hackers/87843/2 "2020-05-22T23:39:12Z")

</div>

Thank you, every needed tool in one place! 😃

---

<div class="post-metadata">

**Author:** ![darekingdom](https://onehack.st/user_avatar/onehack.st/darekingdom/32/36081_2.png) [@darekingdom](https://onehack.st/u/darekingdom)\
**Post date:** [May 25, 2020, 2:07pm UTC](https://onehack.st/t/web-hackers-weapons-cool-tools-used-by-web-hackers/87843/3 "2020-05-25T14:07:17Z")

</div>

Thank you so much for the post @Hyperdemongod.

Sure this will be a such a help.

---

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [May 25, 2020, 4:00pm UTC](https://onehack.st/t/web-hackers-weapons-cool-tools-used-by-web-hackers/87843/4 "2020-05-25T16:00:50Z")

</div>