Pinned Loading

1. cariddi cariddi Public

   Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

   Go 3.8k 344

2. awesome-hacker-search-engines awesome-hacker-search-engines Public

   A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

   Shell 11.5k 1.1k

3. csprecon csprecon Public

   Discover new target domains using Content Security Policy

   Go 559 55

4. depsdev depsdev Public

   CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions.

   Go 71 8

5. scilla scilla Public

   Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

   Go 1.3k 142

6. missing-cve-nuclei-templates missing-cve-nuclei-templates Public

   Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

   Shell 452 50