github.com/rix4uni/GarudRecon

• Automates domain reconnaissance by integrating top open-source security tools in a single workflow.
• Identifies assets and detects critical vulnerabilities including XSS, SQLi, LFI, and RCE.

github.com/rix4uni/VulneraXSS

• High-speed reflected XSS scanner powered by a database of 37,000+ specialized payloads.
• Features context-aware detection logic to eliminate false positives and ensure accurate reporting.

github.com/rix4uni/gitxpose

• Discovers hidden GitHub repositories and hunts for leaked credentials and sensitive secrets.
• Streamlines the analysis of public code for organizational exposure and security risks.

github.com/rix4uni/stoppiracy

• Unified security tool combining `nsfwdetector`, `favinfo`, and `emailextractor` capabilities.
• Processes domains with a single HTTP request to collect keywords, favicons, and emails concurrently.

github.com/rix4uni/originiphunter

• Finds origin IPs by querying Favicon hashes, SSL certificates, and Shodan queries.
• Automatically validates results using a built-in HTTP client to ensure accuracy.

github.com/rix4uni/subdog

• Aggregates subdomain data from 16+ different sources in parallel for maximum coverage.
• Features automatic deduplication and a clean summary table showing findings per source.

github.com/rix4uni/uforall

• Rapidly crawls historical and active URLs from AlienVault, Wayback Machine, and urlscan.io.
• Essential for mapping an organization's web footprint and discovering forgotten endpoints.

github.com/rix4uni/cvemapping

• Curates a chronological database of publicly available CVE exploits (1999–Present).
• Provides an efficient reference for security researchers and vulnerability analysis.

github.com/rix4uni/haktrailsfree

• Fetches up to 10,000 subdomains from SecurityTrails, bypassing the standard 2,000 free limit.
• Utilizes session-based extraction to provide data otherwise restricted on free accounts.

github.com/rix4uni/emailextractor

• Concurrent Go scraper that crawls sites and internal links to discover contact emails.
• Uses ChromeDP to effectively extract data from JavaScript-heavy and dynamic pages.

github.com/rix4uni/tldscan

• Discovers active digital assets by scanning a base domain name across a vast array of TLDs.
• Helps identify related infrastructure and shadow IT during initial reconnaissance.

github.com/rix4uni/subhijack

• Detects subdomain takeover vulnerabilities by matching HTTP responses against service fingerprints.
• Offers cross-platform concurrent processing and supports colorful terminal or JSON outputs.

github.com/rix4uni/gosqli

• Specialized scanner for high-precision detection of time-based blind SQL injection.
• Processes single targets or bulk lists and supports custom payloads via raw HTTP files.

github.com/rix4uni/socialfinder

• Enumerates social media accounts by username across dozens of platforms in parallel.
• Features real-time results streaming and a clean, color-coded terminal interface.

github.com/rix4uni/vulntechfinder

• Detects technology stacks and automatically executes targeted Nuclei templates.
• Utilizes smart filtering and parallel processing to optimize scan efficiency.

github.com/rix4uni/ipfinder

• CLI utility for extracting IP addresses and metadata from Shodan search results at scale.
• Supports advanced query syntax for streamlined analysis and integration.

github.com/rix4uni/waybackurlsx

• Extracts archived URLs from the Wayback Machine with built-in sensitivity filtering.
• Implements adaptive rate limiting and exponential backoff for reliable API handling.

github.com/rix4uni/certinfo

• SSL/TLS certificate scraper that extracts domains from Subject Alternative Names (SANs).
• Performs multi-threaded recursive enumeration to uncover hidden infrastructure.

github.com/rix4uni/paramfinder

• Parses HTML documents to extract parameters from input and textarea elements.
• Crucial for mapping attack surfaces and identifying hidden entry points.

github.com/rix4uni/portmap

• Fast port scanner using Shodan's InternetDB and host APIs for zero-interaction discovery.
• Minimizes digital noise and bypasses many IDS/WAF systems during reconnaissance.

github.com/rix4uni/emailfinder

• Scrapes Addresses from major search engines (Google, Bing, Yandex) and GitHub.
• Streamlines contact identification and organizational mapping during OSINT.

github.com/rix4uni/cspfinder

• Discovers new subdomains and assets by parsing Content Security Policy (CSP) headers.
• Identifies 'hidden' infrastructure explicitly trusted by the application's configuration.

github.com/rix4uni/ftpx

• Fast FTP brute-forcer designed for testing credential strength at scale.
• Supports flexible inputs including individual wordlists or user:pass credential files.

github.com/rix4uni/linkinspector

• Rapid URL validator that extracts HTTP status, content-type, and length metadata.
• Highly customizable filtering optimized for processing massive URL lists via pipes.

github.com/rix4uni/sqlifinder

• Automates SQL injection testing across 20+ database error patterns concurrently.
• Systematically replaces parameter values with specialized payloads for robust detection.

github.com/rix4uni/org2asn

• Maps organizational infrastructure by extracting ASN and IP ranges from bgp.he.net.
• Simplifies the definition of network boundaries for large-scale security assessments.

github.com/rix4uni/querygen

• Converts Nuclei templates into queries for Shodan, Censys, FOFA, and other search engines.
• Facilitates the discovery of vulnerable assets by bridging exploit templates with scanners.

github.com/rix4uni/techfinder

• High-performance tech detection that identifies hundreds of web technologies and frameworks.
• Supports multi-threaded scanning and real-time notifications to Discord.

github.com/rix4uni/whoxysubs

• Retrieves subdomain information from the Whoxy database without requiring an API key.
• Provides a cost-effective way to gather additional targets for reconnaissance.

github.com/rix4uni/goswagger

• Identifies exposed Swagger UI endpoints by testing common paths across web servers.
• Maintains updated endpoint wordlists to uncover sensitive API documentation.

github.com/rix4uni/jsmanager

• Powerful aggregator for discovering and extracting JavaScript files while performing HTTP validation.
• Features high-concurrency processing, deduplication, and intelligent file-type filtering.

github.com/rix4uni/commoncrawlscans

• Scans massive CommonCrawl index files to extract and filter URLs by file extension.
• Supports resumeable scans and automatic categorization for 37+ different file types.

github.com/rix4uni/dlevel

• Categorizes subdomains based on their structural depth/level (e.g., 2nd-level vs 3rd-level).
• Helps organize complex recon data to focus on specific tiers of a target's infrastructure.

github.com/rix4uni/dotgitfinder

• Detects exposed .git/config files to prevent leaks of repository history and secrets.
• Features concurrent scanning with protocol fallback and clear color-coded terminal results.

github.com/rix4uni/ip2org

• Quickly identifies the organization name associated with any given IP address.
• Essential for rapid attribution and ownership verification during large-scale research.

github.com/rix4uni/jscrawler

• High-concurrency tool for rapidly extracting JavaScript file locations from subdomain lists.
• Streamlines discovery for sensitive info gathering and vulnerability research.

github.com/rix4uni/redirectfinder

• Efficient scanner that automates testing for open redirects using specialized payloads.
• Features real-time color-coded results and parallel execution for scanning large target lists.

github.com/rix4uni/tldinfo

• URL parser that accurately separates subdomains and domains using the Public Suffix List.
• Optimized for speed and memory efficiency when processing massive datasets.

github.com/rix4uni/dirless

• Matches and categorizes URLs using configurable regex patterns in a JSON configuration.
• Provides a powerful way to filter recon results for high-interest endpoints or patterns.

github.com/rix4uni/favinfo

• Scrapes favicons from HTML and generates Shodan/Censys search queries from hashes.
• Identifies underlying platforms and technology fingerprints through favicon OSINT.

github.com/rix4uni/lfifinder

• Rapid scanner for identifying Local File Inclusion (LFI) vulnerabilities with curated payloads.
• Automatically manages wordlists and features intelligent filtering for high-risk parameters.

github.com/rix4uni/SSHBruteForce

• Simplified and high-speed SSH credential tester for identifying weak server logins.
• Includes companion scripts for generating targeted passwords based on naming conventions.

github.com/rix4uni/timelimitx

• Robust alternative to the standard 'timeout' command, tuned for long-running security scans.
• Ensures automated processes do not hang indefinitely by enforcing strict execution limits.

github.com/rix4uni/waybackzips

• Uncovers archived backup files and sensitive data dumps indexed by the Wayback Machine.
• Leverages httpx to verify current live availability of discovered archives.

github.com/rix4uni/builtwithsubs

• Identifies technology relationships and subdomains using the BuiltWith database.
• Operates efficiently without the need for API keys or session cookies.

github.com/rix4uni/robotxt

• Extracts and organizes 'Allow' and 'Disallow' directives from robots.txt files.
• Identifies hidden directories and sensitive paths intentionally excluded from search engines.

github.com/rix4uni/wordgen

• Generates targeted wordlists based on common backup and archive naming conventions.
• Designed to simplify the discovery of exposed sensitive files during web fuzzing.

github.com/rix4uni/wppdm

• Management tool for searching, scraping, and downloading WordPress plugins at scale.
• Enables bulk code reviews and vulnerability research across thousands of plugins.

github.com/rix4uni/arinrange

• Scrapes network range information directly from whois.arin.net for given organizations.
• Facilitates precise identification of organizational IP blocks during reconnaissance.

github.com/rix4uni/pathcrawler

• Rapidly extracts web paths and endpoints from HTML content to map application structures.
• Provides quick overviews of accessible web resources and entry points.

github.com/rix4uni/subdomainfuzz

• Generates mutated domain lists by inserting custom payloads into URL subdomains.
• Streamlines preparation for advanced fuzzing to discover hidden development environments.

github.com/rix4uni/pdfhunter

• Automated scanner that discovers and downloads PDF documents from target domains.
• Features keyword matching to identify and flag PDFs containing sensitive information.

github.com/rix4uni/sftpsender

• Transfer files/directories over SFTP using optimized concurrent operations.
• Supports secure credential management through YAML for automated deployments.

github.com/rix4uni/gf

• A wrapper for TomNomNom's gf tool that simplifies grep pattern matching for security auditing.
• Streamlines searching for vulnerabilities like XSS, SQLi, and SSRF in URL datasets.

github.com/rix4uni/indextree

• High-speed directory structure visualizer generating tree-like maps of web endpoints.
• Facilitates quick spatial understanding of target application path hierarchies during recon.

github.com/rix4uni/urlflux

• Fast URL extractor and normalizer designed for processing massive endpoint lists in streams.
• Filters, formats, and prepares URLs efficiently for downstream security testing tools.

github.com/rix4uni/x8scan

• Automated hidden parameter discovery tool leveraging high-speed HTTP probing.
• Uncovers unlinked parameters and hidden inputs across target web applications.

github.com/rix4uni/nmapscan

• Automated Nmap wrapper for multi-threaded port scanning and service discovery across IP ranges.
• Generates structured reports and integrates seamlessly into automated recon pipelines.

github.com/rix4uni/oosexclude

• Filters out-of-scope domains and wildcard rules from target lists based on bug bounty scope.
• Prevents accidental testing of restricted assets during automated reconnaissance.

github.com/rix4uni/ffufscan

• Automated web directory and parameter fuzzing pipeline wrapping ffuf with smart filtering.
• Speeds up discovery of hidden files, backup endpoints, and admin panels.

github.com/rix4uni/thorfinn

• High-performance security recon tool designed to aggregate and organize target assets.
• Streamlines target enumeration and asset tracking for bug bounty workflows.