Tools

s0md3v/xsstrike

Most advanced XSS scanner.

thumpbo/cve-2025-30208-exp

CVE-2025-30208-EXP

ffuf/ffuf

Fast web fuzzer written in Go

maurosoria/dirsearch

Web path scanner

evyatarmeged/raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

bo0om/fuzz.txt

Potentially dangerous files

devanshbatham/paramspider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

0xkayala/nucleifuzzer

Automated web vulnerability scanner combining URL discovery tools (ParamSpider, waybackurls, gauplus, hakrawler, katana) with Nuclei fuzzing…

1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

xnl-h4ck3r/gap-burp-extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

overspace-labs/caa

BurpSuite plugin for HTTP packet analysis and fuzzing dictionary generation. Extracts parameters, paths, and files from requests, counts frequency,…

wireghoul/dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

musana/fuzzuli

Domain-aware URL fuzzer that dynamically generates wordlists to discover exposed backup and sensitive files on web servers.

r0075h3ll/oralyzer

Python-based open redirect vulnerability scanner that fuzzes URLs to detect header, JavaScript, and meta tag-based redirects, with integrated…

pepelux/sippts

Set of tools to audit SIP based VoIP Systems

anmolksachan/thetimemachine

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

blackarch/wordlistctl

Fetch, install and search wordlist archives from websites and torrent peers.