ameenmaali

qsfuzz

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

urldedupe

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

wordlistgen

Quickly generate context-specific wordlists for content discovery from lists of URLs or paths

endpointdiff

Wrapper around LinkFinder to quickly determine whether endpoints have been added/removed to JavaScript files.

whoareyou

whoareyou is a tool to find the underlying technology/software used in a list of websites passed through stdin (using Wappalyzer dataset)

qsinject

qsinject (Query String Inject) is a tool that allows you to quickly substitute query string values with regex matches, one-at-a-time.

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

hackeroni

A Go API client for HackerOne (api.hackerone.com)

n-pass