🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

平常看到好的渗透hacking工具和多领域效率工具的集合

Automation for javascript recon in bug bounty.

The fastest dork scanner written in Go.

An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.

挖掘国内外漏洞平台必备的自动化捡钱赏金技巧，看了并去做了捡钱如喝水。

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

A Subdomain Enumeration and Validation tool for Bug Bounty and Pentesters.

Cross Origin Resource Sharing MisConfiguration Scanner

CloudFlare Checker written in Go

GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fingerprints.

A tool to check a bunch of URLs that contain reflecting params.

A tool to find subdomains or domains from passive sources.

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

Subdomain discovery using the power of 'The Rapid7 Project Sonar datasets'

API Key/Token Exploitation Made easy.

R3C0Nizer is the first ever CLI based menu-driven web application recon tool

A python tool to check subdomain takeover vulnerability

Dump all available paths and/ endpoints on WADL file.

Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.

An Android SSL Pinning Remover tool for Security research and Bug Bounty

grapX will iterate through the URLs and grep the endpoints with all possible extensions.

Unique wordlist generator of unique wordlists.

A python3 intruder that gave me bounties, easy to use and as fast as fuff

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

Extracts subdomains from a specified domain using https://recon.dev.

All In One, Fast, Easy Recon Tool

Running nuclei Continuously

Extract parameters/paths from urls

HashExpoit is Great Tool For Cracking Hash