Web crawling, scraping, spidering, and automated reconnaissance tools for security testing.
yora1928/cve-2026-15748Scans WordPress Forminator for CVE-2026-15748 unauthenticated RCE. Detects vulnerable sites, crawls forms, extracts nonces, runs safe upload tests.
daffainfo/oneliner-bugbountyA collection oneliner scripts for bug bounty
zyn3rgy/clickoncehunterGolang search engine scraper intended for identification of published ClickOnce deployments
ransomlook/ransomlookAutomated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…
msadministrator/czdsA Python package to download Zone Files from the Centralized Zone Data Service hosted by ICAAN.
caio-ishikawa/netscoutOSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.
mandatoryprogrammer/thermopticA next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.
andreiverse/gorillatool for generating wordlists or extending an existing one using mutations.
si9int/cc.pyExtracting URLs of a specific target based on the results of "commoncrawl.org"
xroche/httrackHTTrack Website Copier, copy websites to your computer (Official repository)
jas502n/security_articlescrapy website Article and link ...
k3ystr0k3r/ematEmat: An email scraper that will scrape any website for Gmail, Yahoo, Hotmail and government email accounts.
k3ystr0k3r/extracterA nice web-crawler written in Bash that will look for login pages/admin-panels for you on any given website.
k3ystr0k3r/lurkstrainAn all in one admin panel crawler for pentesters.
nccgroup/creep-web-app-scannerA web app scanner
d0rb/rusttlsx🦀 Stealth HTTP client for Rust . mimics real browser TLS fingerprints for undetectable requests. Fast, type-safe, and built for precision networking.
aquasecurity/vexhub-crawlerCollect VEX documents and update VEX Hub
