Ultimate Web Brute-Forcer

Complexity
Get all possible URLs for a web app through js extraction, fuzzing per dir level, wayback archive, remove false positives and do everything in parallel
zaric

Fuzz URL Levels - Multiple

Complexity
Enumerate URLs for a list of hosts, then use a wordlist to fuzz for additional directories at each level.
zaric

Fuzz URL levels

Complexity
Enumerate URLs for a host, then use a wordlist to fuzz for additional directories at each level.
trickest-mhmdiaa

Check URLs and send notification on diff

Complexity
Take a list of URLs, request them, and send notification if changes occur in title, status code or content-length
zaric

Custom Parameter Discovery Wordlist

Complexity
Collect URLs of a list of domains and generate a custom parameter discovery wordlist
trickest-mhmdiaa

Simple Content Discovery

Complexity
Enumerate subdomains and discover URLs through multiple ways
trickest-mhmdiaa

Inventory 2.0 - URL enumeration

Complexity
Enumerate URLs from passive sources and classify them based on potential vulnerabilities. Check out the URLs of public bug bounty programs on https://github.com/trickest/inventory
trickest-mhmdiaa

Inventory 2.0 - Web Spider

Complexity
Actively crawl a list of web servers. Check out the crawled URLs of public bug bounty programs on https://github.com/trickest/inventory
trickest-mhmdiaa

Get Firebase Databases from Hosts

Complexity
Permutate and alter hosts in order to find firebase instances.
zaric

Brute-Force Parameters - Single URL

Complexity
Get all of the parameters that are used by a single url passed.
zaric

Single Web App Fuzz

Complexity
Fuzz and spider a web application, get responses and zip files for further examination.
zaric

NPM Wordlist & NPM Package Finder

Complexity
Find package.json files on list of hosts by creating wordlist by cloning OneListForAll and then brute-forcing list of hosts.
zaric

JavaScript Links and Paths

Complexity
Find URLs/endpoints in a list of JavaScript files
trickest-mhmdiaa

Virtual Host Discovery

Complexity
Enumerate virtual hosts
trickest-mhmdiaa

Crawl URLs and Discover JavaScript URLs & Endpoints

Complexity
Crawl a web host and extract endpoints and URLs from its JavaScript code
trickest-mhmdiaa

Brute-Force Files & Directories on a List of Hosts

Complexity
Fuzz a list of hosts for files/directories with a wordlist
trickest-mhmdiaa

Spider All Subdomains

Complexity
Spider all subdomains and merge all results.
trickest-mhmdiaa

APK Discovery - Urls & Paths

Complexity
Find URLs & Paths in an APK file
trickest-mhmdiaa

Get All Public Urls

Complexity
Get all archived urls for a list of subdomains.
trickest-mhmdiaa

Get all urls and classify by vulnerability type

Complexity
This workflow is used to gather ALL URLs and sort them by common vulnerabilities
trickest-mhmdiaa