Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

• UpdatedJan 1, 2025
• Go

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

• UpdatedSep 30, 2024
• Shell

Secret and/or credential patterns used for gf.

• UpdatedFeb 10, 2023
• Shell

It grep subdomains, email/username, build custom wordlist etc from gau results

• UpdatedNov 4, 2022
• Shell

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

• UpdatedDec 11, 2020
• Shell

URL Extractor | Designed By YogSec is a powerful Bash script that helps you extract URLs from a single file or all files inside a folder

• UpdatedMar 6, 2025
• Shell

Uniqup is a Python script that takes a list of URLs and gets rid of URLs with repeated parameters. It can be used with tools like gau and wayback to ensure that only unique URLs are captured.

• UpdatedMay 12, 2023
• Python

🔍 Detect leaked credentials in your codebase quickly and effectively with TruffleHog's powerful scanning capabilities.

• UpdatedFeb 20, 2026

A CMS-focused reconnaissance pipeline for WordPress and Drupal, combining Katana for URL discovery, GF for filtering sensitive endpoints, and Nuclei for vulnerability validation. Designed for responsible and organized penetration testing.

• UpdatedDec 6, 2025
• Shell