
lazyrecon
Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

🦚 A web-app pentesting suite written in rust .

Search for information related to domain: Emails - IP addresses - Sub-Domains - Information on WEB technology - Type of Firewall - NS and MX records.

Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover…

A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!


A modular distributed penetration testing tool.

Web-based project management interface for penetration testing and bug bounty workflows, automating port scanning with Nmap/Masscan and subdomain…

Python-based web domain scanner integrating Sublist3r, Dirble, Nmap, and WhatWeb for subdomain discovery, directory enumeration, network scanning,…

A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.

Open-source AI-powered 5-phase VAPT pentest agent — recon/scan/vuln/exploit/report with PoC

Read-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)

An educational Python toolkit for authorized penetration testing: threaded port scanner, subdomain & directory enumeration, banner grabber and host…