How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body. The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte
LinkFinder is a security reconnaissance and static analysis tool designed for JavaScript endpoint discovery. It extracts absolute and relative URLs and parameters from JavaScript files to map the attack surface of web applications and identify hidden API routes. The tool operates through static code analysis and regular expression pattern matching to find endpoints without executing the source code. It includes a data processor for importing exported files from Burp Suite, enabling the batch analysis of multiple JavaScript assets in a single execution. The system provides capabilities for do
The main features of sh1yo/x8 are: JavaScript and API Analysis, Parameter Discovery, Reconnaissance Tools, Parameter Bruteforcing.
Open-source alternatives to sh1yo/x8 include: s0md3v/arjun — Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large… devanshbatham/paramspider — Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing. blacklanternsecurity/bbot — This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions… m4ll0k/secretfinder — SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript… lc/subjs — Fetches javascript file from a list of URLS or subdomains. gerbenjavado/linkfinder — LinkFinder is a security reconnaissance and static analysis tool designed for JavaScript endpoint discovery. It…