Pinned Loading

1. cariddi cariddi Public

   Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

   Go 2.8k 254

2. awesome-hacker-search-engines awesome-hacker-search-engines Public

   A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

   Shell 9.6k 915

3. csprecon csprecon Public

   Discover new target domains using Content Security Policy

   Go 484 51

4. favirecon favirecon Public

   Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

   Go 220 30

5. missing-cve-nuclei-templates missing-cve-nuclei-templates Public

   Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

   Shell 412 49

6. scilla scilla Public

   Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

   Go 1.1k 137