886 Open source projects that are alternatives of or similar to Dirsearch

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

All-in-one tool for managing vulnerability reports from AppSec pipelines

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

Open-Source Security Architecture | 开源安全架构

grep rough audit - source code auditing tool

API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Simple Golang HTTPS/TLS Examples

无状态子域名爆破工具

Modern alternative to dirbuster/dirb

Mercury is a hacking tool used to collect information and use the information to further hurt the target

This ansible role gets information from an AWS VPC and generate a graphical representation of security groups

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

A Blazing fast Security Auditing tool for Kubernetes

Unique wordlist generator of unique wordlists.

Patch-level verification for Bundler

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

VOIP Security Audit Framework

Extract endpoints marked as disallow in robots files to generate wordlists.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

yotter - bash script that performs recon and then uses dirb to discover directories that might lead to information leakage

Wordlists and passwords handcrafted with ♥

Web Scan Lazy Tools - Python Package

Fully automated offensive security framework for reconnaissance and vulnerability scanning

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

network reconnaissance toolkit

Web application vulnerability scanner

一键提取安卓应用中可能存在的敏感信息。

ssh mitm server for security audits supporting public key authentication, session hijacking and file manipulation

System Optimizer and Monitoring, Security Auditing, Vulnerability scanner for Linux, macOS, and UNIX-based systems

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

Custom memory allocator that helps discover reads from uninitialized memory

Username enumeration and password spraying tool aimed at Microsoft O365.

OSS Vulnerability Scanner for Windows Platform

Automatic Service Enumeration Script

🚀 Fast Port Scanner 🚀

This is an advanced script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL!

🕵️‍♀️ MixAudit provides a mix deps.audit task to scan a project Mix dependencies for known Elixir security vulnerabilities

DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of websites.. Banner Grabber: To get the service or software running on a port. (After knowing the software running google for its vulnerabilities.) Web Spider: For gathering web application hacking information. Email scraper: To get all emails related to a webpage IMDB Rating: Easy way to access the movie database. Both .exe(compressed as zip) and .py versions are available in files.

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

Automated brute-forcing attack tool.

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

Bash script purposed for system enumeration, vulnerability identification and privilege escalation.

A tool to test security of json web token

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

The Simplistic Information Gathering Engine | Find Advanced Information on a Username, Website, Phone Number, etc.

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

A note-taking macOS app for penetration-testers.

An information gathering tool to collect git commit emails in version control host services

Node.js rate limit requests by key with atomic increments in single process or distributed environment.

This Repository contains the stuff related to windows Active directory environment exploitation