#1Web crawling, scraping, spidering, and automated reconnaissance tools for security testing.
Kitploit recommended

A powerful directory brute-force tool that's tailored for recursive/multiplex operations, API discovery and enumeration, JS file scraping, and lists…

CVE-2015-6668, relacionada con el plugin WP Job Manager para WordPress (versiones ≤ 0.7.25).

Proof-of-concept exploit demonstrating SSRF vulnerabilities in Firecrawl web scraper (CVE-2024-56800, CVE-2025-57818) with self-hosted setup and…

A powerful browser crawler for web vulnerability scanners

Gryffin is a large scale web security scanning platform.

OSINT python webscaping framework

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

The AI toolkit for building reliable browser automations

Scrape, Hunt, and Transform names and usernames

WEBFANG, is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a…

wxpath - declarative web crawling with XPath; a Web Query Language (WQL)

PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.

🦀 Stealth HTTP client for Rust . mimics real browser TLS fingerprints for undetectable requests. Fast, type-safe, and built for precision networking.

CVE-2024-38526 - Polyfill Scanner

Python PoC validating CVE-2025-6325 unauthenticated privilege escalation and CVE-2025-6327 arbitrary file upload RCE in King Addons for Elementor <=…

Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS :performing_arts:

declutters url lists for crawling/pentesting

PwnXSS: Vulnerability (XSS) scanner exploit