Open-source alternatives to Dirhunt

HowToHunt is a bug bounty hunting knowledge base and a structured guide for web application penetration testing. It provides a research methodology for organizing security testing procedures and validating application behaviors against known vulnerability patterns. The project features a curated library of security flaws and reconnaissance techniques. It organizes security testing into modular playbooks, checklists, and categorical vulnerability mappings to align specific exploitation techniques with target weaknesses. The repository covers a systematic sequence of information gathering task

Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).

CMS识别 python gevent实现

this tools can be searched web leak files

w11scan是一款分布式的WEB指纹识别系统（包括CMS识别、js框架、组件容器、代码语言、WAF等等），管理员可以在WEB端新增/修改指纹，建立批量的扫描任务，并且支持多种搜索语法。

Get website IP address by scanning the entire net 通过扫描全网绕过CDN获取网站IP地址

simple TCP banner grabbing with node.js

OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website.

Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are also used to identify known…

GOWAPT is the younger brother of wfuzz a swiss army knife of WAPT, it allow pentester to perform huge activity with no stress at all, just configure it and it's just a matter of clicks.

Potentially dangerous files

Web Content Discovery Tool

Detect and bypass web application firewalls and protection systems

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

tplmap is a security tool designed for the detection and exploitation of server-side template injection vulnerabilities. It functions as an automated scanner to identify vulnerable template engine contexts and provides a framework for achieving remote code execution. The tool focuses on translating high-level requests into engine-specific syntax to execute operating system commands and bypass application sandboxes. It further enables remote file system access, allowing users to read, write, and transfer files between a local machine and a target server. Additional capabilities include the ab

` / | () | () | | / | ' \ / | | ' \| '| | ' \ / | | || (| | | | | (| | | |) | | | | | | | (| | \\,|| ||\, ||./|| ||| ||\,| |/ Beta - v0.8.7 Dashboard Finder ``

fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a fuzzing payload dictionary, a resource discovery wordlist, and a fault injection dataset containing corrupted Unicode, null bytes, and escape codes to trigger application crashes and logic errors. The project includes a security filter bypass list featuring polyglots and encoded strings to evade web application firewalls and input validation filters. It also provides a comprehensive web application penetration testing dataset specifically for identifying flaws such as cross-s

Inforfinder is a tool made to collect information of any domain pointing at a server (ip,domain,range,file).

DOM fuzzer

List DTDs and generate XXE payloads using those local DTDs.

@Author: xxlin @Date: 2019-04-11 20:34:14 @LastEditors: ttttmr @LastEditTime: 2019-06-03 23:49:33 -->

A script that inspects multi-byte character sets looking for characters with specific user-defined properties

wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications.

Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server. The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection str

webdirdig web敏感目录\信息泄漏扫描脚本