1ndianl33t/Gf-Patterns resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1446 stars · 310 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of JSON pattern files for the tomnomnom/gf grep wrapper, used to match URLs and parameters vulnerable to SSRF, RCE, LFI, SQLi, SSTI, IDOR, open redirects, and debug logic. It is a companion dataset for bug bounty and penetration testing recon pipelines.

Use cases

• find potentially vulnerable URL parameters in waybackurls output
• grep subdomain data for SSRF-prone parameters
• detect open redirect parameters during recon
• identify SQL injection candidate parameters
• filter interesting subdomains and debug endpoints
• build automated bug bounty recon pipelines

When to choose

• you already use tomnomnom/gf and want ready-made vulnerability patterns
• you are doing bug bounty recon on large URL datasets
• you want version-controlled grep patterns for common web vulns

When to avoid

• you need an actual vulnerability scanner rather than pattern matching
• you do not use the gf tool or Go-based recon tooling
• you need Windows-native tooling without a Unix-like shell

Facets

dataset · maturity active

search-engine security developer-tools security penetration-testing developer-tools cli bug-bounty gf-patterns grep vulnerability-hunting recon pattern-files linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="1ndianl33t/Gf-Patterns")