
skipfish
Web application security scanner created by lcamtuf for google - Unofficial Mirror
Web crawling, scraping, spidering, and automated reconnaissance tools for security testing.

Web application security scanner created by lcamtuf for google - Unofficial Mirror

The AI toolkit for building reliable browser automations

Crawler (Bot) searching for credential leaks on paste sites.

PwnXSS: Vulnerability (XSS) scanner exploit

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface…

crawls the website and finds broken social media links that can be hijacked

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Turn any web app into an API. Chrome extension captures browser traffic, auto-generates schemas, lets AI replay APIs directly. No official API needed.

a javascript change monitoring tool for bugbounties

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…

Instagram OSINT tool to export and analyse followers | following with their details

OSINT tool - gets data from services like shodan, censys etc. in one app


Automated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…

htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.


Automated white-hat vulnerability scanner that monitors HackerOne and Bugcrowd assets, performs subdomain enumeration, crawling, fingerprinting, and…

Automated OSINT reconnaissance tool that queries Google and social platforms to gather intelligence on usernames and queries, with proxy rotation and…