Curated open source, analyzed

Find open source projects worth using

Hand-picked GitHub repositories with a clear analysis of what they do, who they are for and how they compare.

1,759 repositories ·227 topics· updated daily

Sublist3r: Enumerate Website Subdomains with OSINT

Featured repository

Sublist3r: Enumerate Website Subdomains with OSINT

Sublist3r is a Python tool for penetration testers and bug hunters to discover a target domain’s subdomains. It gathers results from search engines and security data sources, with optional DNS brute forcing and port checks.

Recently added

The newest projects added to the catalog.

Sublist3r: Enumerate Website Subdomains with OSINT

Sublist3r: Enumerate Website Subdomains with OSINT

Sublist3r is a Python tool for penetration testers and bug hunters to discover a target domain’s subdomains. It gathers results from search engines and security data sources, with optional DNS brute forcing and port checks.

InactiveHealth 28/100

PythonSecurityCLI
Added Oct 27, 2026 View details
param-miner: Find Hidden Web Parameters in Burp Suite

param-miner: Find Hidden Web Parameters in Burp Suite

Param Miner is a Java extension for PortSwigger Burp Suite that discovers hidden, unlinked parameters in web requests. It helps security testers investigate web cache poisoning and other behaviors triggered by unexpected headers, cookies, or parameters.

MaintainedHealth 30/100

SecurityJavaBrowser Extension
Added Oct 27, 2026 View details
runtime: Build the .NET Runtime, Libraries, and Host

runtime: Build the .NET Runtime, Libraries, and Host

.NET Runtime is the source repository for building the .NET runtime, libraries, and shared `dotnet` host installers across supported platforms. It is for developers building, testing, or contributing to .NET itself, rather than a standalone application framework.

ActiveHealth 81/100

CsharpProgrammingCross Platform
Added Oct 26, 2026 View details
Sn1per: Automate Penetration Testing and Attack Surface Recon

Sn1per: Automate Penetration Testing and Attack Surface Recon

Sn1per is a Shell-based offensive-security platform for reconnaissance, vulnerability scanning, exploitation, and reporting in one workspace. It targets penetration testers and security teams, with Linux installation and Docker deployment options.

QuietHealth 28/100

ShellCybersecuritySecurity Tools
Added Oct 26, 2026 View details
dnscan: Scan Domains for DNS Subdomains

dnscan: Scan Domains for DNS Subdomains

dnscan is a Python wordlist-based DNS subdomain scanner. It first attempts DNS zone transfers, then can discover names through recursive wordlist scans, with options for IPv6, alternate resolvers and TLD scanning.

InactiveHealth 23/100

PythonCLINetworking
Added Oct 26, 2026 View details
dnsx: Run DNS Queries and Brute-Force Subdomains

dnsx: Run DNS Queries and Brute-Force Subdomains

dnsx is a Go command-line DNS toolkit built on ProjectDiscovery’s retryabledns library. It resolves and probes domains with custom resolvers, supports DNS record queries and subdomain brute-forcing, and filters wildcard results.

ActiveHealth 62/100

GoCLISecurity Tools
Added Oct 26, 2026 View details

Stay Updated

Get notified about new repositories and updates. Join our community of developers!