Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Secret and/or credential patterns used for gf.

It grep subdomains, email/username, build custom wordlist etc from gau results

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

Grepr is a fast, flexible command-line tool built for bug bounty hunters and security researchers. It filters and extracts valuable URLs from output generated by tools like gau and the Wayback Machine.

Uniqup is a Python script that takes a list of URLs and gets rid of URLs with repeated parameters. It can be used with tools like gau and wayback to ensure that only unique URLs are captured.

🔍 Detect leaked credentials in your codebase quickly and effectively with TruffleHog's powerful scanning capabilities.

Python-based reconnaissance automation framework for bug bounty hunting and web application security testing.

A CMS-focused reconnaissance pipeline for WordPress and Drupal, combining Katana for URL discovery, GF for filtering sensitive endpoints, and Nuclei for vulnerability validation. Designed for responsible and organized penetration testing.

gau fork for fetching known URLs from OTX, Wayback Machine, Common Crawl, and VirusTotal.

Interactive Gau Rage checklist for Final Fantasy VI Pixel Remaster.