Stars
Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http
Directory/File, DNS and VHost busting tool written in Go
Fast passive subdomain enumeration tool.
Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers
An OOB interaction gathering server and client library
Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy
Scan for misconfigured S3 buckets across S3-compatible APIs!
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Gospider - Fast web spider written in Go
Bruteforcing from various scanner output - Automatically attempts default creds on found services.
Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)
开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)
Small, fast tool for performing reverse DNS lookups en masse.
A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.
Community curated list of public bug bounty and responsible disclosure programs.
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place
Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover
Fetches javascript file from a list of URLS or subdomains.
A tool to check a bunch of URLs that contain reflecting params.
Golang client for querying SecurityTrails API data
Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pages and see the returned values