How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
A collection of hacks and one-off scripts
The main features of tomnomnom/hacks are: Web Asset Discovery.
Projects with overlapping indexed features include: bitquark/shortscan — An IIS short filename enumeration tool. hakluke/hakrawler — Hakrawler is a command-line web spider tool designed for security reconnaissance, built to crawl target websites and… jaeles-project/gospider — Gospider - Fast web spider written in Go. lc/gau — Gau is a command-line tool and passive URL enumerator designed to discover and aggregate known and historical web… projectdiscovery/katana — Katana is a web crawler and spider designed for security reconnaissance and web application mapping. It functions as a… projectdiscovery/urlfinder — A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without…
Hakrawler is a command-line web spider tool designed for security reconnaissance, built to crawl target websites and extract hyperlinks along with JavaScript file references. As a focused reconnaissance utility, it collects every discoverable URL and script source from a given domain, mapping the attack surface for penetration testing and vulnerability assessment. The tool differentiates itself through its concurrent architecture: a fixed-size goroutine pool fetches pages in parallel, while CSS selectors parse HTML to extract anchor and script references. A depth-aware recursion limiter preve
Gospider - Fast web spider written in Go
Gau is a command-line tool and passive URL enumerator designed to discover and aggregate known and historical web addresses for specific target domains. It functions as a collection framework that retrieves domain-specific data from public web archives and threat intelligence providers. The tool focuses on passive reconnaissance and open-source intelligence research to map attack surfaces without sending requests directly to target infrastructure. It aggregates data from multiple external sources to identify accessible web endpoints and forgotten pages. The system includes capabilities for r
An IIS short filename enumeration tool