awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
Back to bo0om/parampampam

Projects sharing features with ParamPamPam

30 open-source projects similar to bo0om/parampampam, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.

  • hahwul/dalfoxhahwul avatar

    hahwul/dalfox

    4,846View on GitHub↗

    Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

    Gobugbountybugbounty-toolcicd-pipeline
    View on GitHub↗4,846
  • blacklanternsecurity/bbotblacklanternsecurity avatar

    blacklanternsecurity/bbot

    9,929View on GitHub↗

    This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte

    Python
    View on GitHub↗9,929
  • assetnote/batchqlassetnote avatar

    assetnote/batchql

    412View on GitHub↗

    GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

    Python
    View on GitHub↗412
  • assetnote/kiterunnerassetnote avatar

    assetnote/kiterunner

    3,204View on GitHub↗

    Contextual Content Discovery Tool

    Go
    View on GitHub↗3,204

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Find more with AI search
  • brendan-rius/c-jwt-crackerbrendan-rius avatar

    brendan-rius/c-jwt-cracker

    2,548View on GitHub↗

    JWT brute force cracker written in C

    Cbrute-forcecrackerjwt-authentication
    View on GitHub↗2,548
  • devanshbatham/headerpwnD

    devanshbatham/headerpwn

    0View on GitHub↗
    View on GitHub↗0
  • devanshbatham/paramspiderdevanshbatham avatar

    devanshbatham/ParamSpider

    3,103View on GitHub↗

    Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

    Python
    View on GitHub↗3,103
  • dvyukov/go-fuzzdvyukov avatar

    dvyukov/go-fuzz

    4,853View on GitHub↗

    go-fuzz is a coverage-guided randomized testing tool for identifying crashes and logic bugs in Go code. It consists of a fuzzer that evolves random inputs based on code execution paths, an instrumentation tool that produces binaries for tracking coverage, and a seed corpus manager. The tool utilizes compile-time binary instrumentation to monitor branch coverage and employs a feedback-driven mutation loop to prioritize inputs that reach new sections of the codebase. It includes capabilities for comparative differential testing to identify logic errors by executing different implementations of

    Go
    View on GitHub↗4,853
  • dwisiswant0/crlfuzzdwisiswant0 avatar

    dwisiswant0/crlfuzz

    1,543View on GitHub↗

    A fast tool to scan CRLF vulnerability written in Go

    Go
    View on GitHub↗1,543
  • dwisiswant0/ppfuzzD

    dwisiswant0/ppfuzz

    0View on GitHub↗
    View on GitHub↗0
  • epi052/feroxbusterepi052 avatar

    epi052/feroxbuster

    7,522View on GitHub↗

    Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and directories on web servers. It functions as a recursive URL scanner that identifies unlinked endpoints and API resources by combining wordlist-based scanning with automated crawling. The tool operates as a proxy-aware fuzzer, allowing network requests to be routed through HTTP or SOCKS proxies for traffic interception or anonymity. It utilizes recursive directory crawling to automatically queue discovered paths and find nested content. The system includes capabilities for discovery

    Rustcontent-discoveryenumerationhacktoberfest
    View on GitHub↗7,522
  • ffuf/ffufffuf avatar

    ffuf/ffuf

    15,618View on GitHub↗

    This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure mapping. It functions as a security-focused scanner that identifies hidden files, directories, parameters, and virtual hosts by injecting payloads into HTTP requests. By systematically testing how servers handle various inputs, it assists in mapping the architecture of web applications and uncovering potential security vulnerabilities. The tool distinguishes itself through a highly concurrent engine that manages asynchronous request execution and recursive job orchestration. I

    Gofuzzerinfosecpentesting
    View on GitHub↗15,618
  • google/gofuzzgoogle avatar

    google/gofuzz

    1,495View on GitHub↗

    Fuzz testing for go.

    Go
    View on GitHub↗1,495
  • google/syzkallergoogle avatar

    google/syzkaller

    6,232View on GitHub↗

    Syzkaller is an unsupervised, coverage-guided kernel fuzzer that automatically generates and mutates system call sequences to find bugs in operating system kernels. It operates without human intervention, using a closed feedback loop of input generation, execution, crash detection, and corpus refinement to continuously explore kernel code paths. The fuzzer distinguishes itself by supporting multiple operating system kernels, including Linux, FreeBSD, and Windows, through per-platform syscall harnesses that abstract system call interfaces behind a common driver. It uses declarative description

    Go
    View on GitHub↗6,232
  • hahwul/jwt-hackhahwul avatar

    hahwul/jwt-hack

    998View on GitHub↗

    JSON Web Token Hack Toolkit

    Rust
    View on GitHub↗998
  • hashcat/hashcathashcat avatar

    hashcat/hashcat

    26,200View on GitHub↗

    Hashcat is a high-performance hash cracking software and OpenCL compute application used to recover plain-text passwords from hashed data. It functions as a GPU-accelerated recovery tool and distributed password cracker, leveraging CPUs and GPUs to perform intensive cryptographic computations. The system differentiates itself through a distributed cracking workflow that coordinates tasks across multiple machines via an overlay network to share computational load. It further optimizes recovery speed using Markov chain keyspace optimization to prioritize the most likely password candidates. Th

    C
    View on GitHub↗26,200
  • jtpereyda/boofuzzjtpereyda avatar

    jtpereyda/boofuzz

    2,338View on GitHub↗

    A fork and successor of the Sulley Fuzzing Framework

    Python
    View on GitHub↗2,338
  • ksharinarayanan/ssrfireksharinarayanan avatar

    ksharinarayanan/SSRFire

    971View on GitHub↗

    An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

    Shell
    View on GitHub↗971
  • lmammino/jwt-crackerlmammino avatar

    lmammino/jwt-cracker

    1,172View on GitHub↗

    Simple HS256, HS384 & HS512 JWT token brute force cracker.

    JavaScript
    View on GitHub↗1,172
  • mak-/paramethmaK- avatar

    maK-/parameth

    1,395View on GitHub↗

    This tool can be used to brute discover GET and POST parameters

    Python
    View on GitHub↗1,395
  • moopinger/smugglefuzzM

    Moopinger/smugglefuzz

    0View on GitHub↗
    View on GitHub↗0
  • nicholasaleks/crackqlN

    nicholasaleks/CrackQL

    0View on GitHub↗
    View on GitHub↗0
  • nikitastupin/clairvoyancenikitastupin avatar

    nikitastupin/clairvoyance

    1,481View on GitHub↗

    Obtain GraphQL API schema even if the introspection is disabled

    Python
    View on GitHub↗1,481
  • planetis-m/libfuzzerP

    planetis-m/libfuzzer

    0View on GitHub↗
    View on GitHub↗0
  • portswigger/param-minerPortSwigger avatar

    PortSwigger/param-miner

    1,437View on GitHub↗

    This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.

    Java
    View on GitHub↗1,437
  • purseclab/fuzzusbpurseclab avatar

    purseclab/fuzzusb

    37View on GitHub↗

    USB gadget fuzzing framework for the Linux kernel.

    C
    View on GitHub↗37
  • riza/medusaR

    riza/medusa

    0View on GitHub↗
    View on GitHub↗0
  • s0md3v/arjuns0md3v avatar

    s0md3v/Arjun

    6,086View on GitHub↗

    Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body. The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response

    Pythonapi-fuzzerapi-fuzzingapi-testing
    View on GitHub↗6,086
  • sh1yo/x8Sh1Yo avatar

    Sh1Yo/x8

    2,022View on GitHub↗
    Rustbugbountycontent-discoveryrecon
    View on GitHub↗2,022
  • status-im/nim-drchaosS

    status-im/nim-drchaos

    0View on GitHub↗
    View on GitHub↗0