Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Make JSON greppable!

A next-generation crawling and spidering framework.

In-depth attack surface mapping and asset discovery

Fast passive subdomain enumeration tool.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

A Tool for Domain Flyovers

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Fetch all the URLs that the Wayback Machine knows about for a domain

Take a list of domains and probe for working HTTP and HTTPS servers

Gospider - Fast web spider written in Go

Quickly discover exposed hosts on the internet using multiple search engines.

The Swiss Army knife for automated Web Application Testing

A collection of hacks and one-off scripts

A wrapper around grep, to help you grep for things

Fetch many paths for many hosts - without killing the hosts

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

Find subdomains on GitHub.

A rapid API for the Project Sonar dataset

Pathbrute

An experimental CORS middleware library for Go. Consider using github.com/jub0bs/cors (its successor) instead.