Information Gathering / Network PenTest / Web Information Gathering / WebApp PenTest
by do son · Published February 22, 2018
Shocens Query Shodan and Censys Features Shodan query with filters Censys query for all supported ipv4 query terms Supports searching multiple queries by newline separated file Output results in CSV, TXT Diffs last scan...
What is RadioCarbon? Typically you get leaked credentials that look like the list in the following screenshot. They consist of email addresses or usernames, cleartext passwords or password hashes. The problem with those leaked...
KNXmap A tool for scanning and auditing KNXnet/IP gateways on IP driven networks. KNXnet/IP defines Ethernet as physical communication media for KNX (EN 50090, ISO/IEC 14543). KNXmap also allows scanning for devices on the...
Information Gathering / Network PenTest / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published January 20, 2018
ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets. The project currently consists of...
Just-Metadata is a tool that can be used to gather intelligence information passively about a large number of IP addresses, and attempt to extrapolate relationships that might not otherwise be seen. It has “gather”...
Information Gathering / Network PenTest
by do son · Published January 14, 2018 · Last modified June 13, 2018
OnionHarvester A small TOR Onion Address harvester for checking if the address is available or not. The program uses the TOR local socks5 proxy for finding all the Onion Addresses which are alive and...
Information Gathering / Network PenTest / Web Information Gathering / WebApp PenTest
by do son · Published January 13, 2018
shodan-cli Simple golang Shodan command line client with default query. Build $ go get gopkg.in/ns3777k/go-shodan.v2/shodan $ go get github.com/logrusorgru/aurora $ go build As usual, you can build executables for multiple platforms : $ #...
Information Gathering / Network PenTest / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published January 12, 2018
Host Scanner The purpose of this project is to implement a network scanner with both active and passive data acquisition components, which can then autonomously identify services using the latest CPE dictionary from NIST...
Information Gathering / Network PenTest
by do son · Published January 9, 2018 · Last modified June 26, 2023
ZMap is a fast single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable scanning the entire public IPv4 address space in...
Information Gathering / Network PenTest / Password Attacks / Vulnerability Analysis
by do son · Published December 31, 2017 · Last modified October 10, 2021
lyncsmash a collection of tools to enumerate and attack self-hosted Skype for Business and Microsoft Lync installations Note: these tools will not work with Skype/Lync installations hosted at Microsoft. Download git clone https://github.com/nyxgeek/lyncsmash.git scripts lyncsmash.py...
Information Gathering / Network PenTest
by do son · Published December 7, 2017 · Last modified March 29, 2022
SMBCrunch One of the most time-consuming tasks as a red teamer is diving into filesystems and shares, attempting to identify any potentially sensitive information. SMBCrunch allows a red teamer to quickly identify Windows File...
JAWS is PowerShell script designed to help penetration testers (and CTFers) quickly identify potential privilege escalation vectors on Windows systems. It is written using PowerShell 2.0 so ‘should’ run on every Windows version since...
Information Gathering / Network PenTest / Web Information Gathering / WebApp PenTest
by do son · Published December 1, 2017 · Last modified June 26, 2018
recon.sh This tool is for the computer hacking community and gives a framework for storing reconnaissance (recon) information. Recon is a tedious and continuous process that involves mentally processing and parsing command output. Conclusions...
In the penetration testing, information collection is the most important stage, accounting for about 60% of the penetration test. Based on the collected information, we can effectively improve the success rate of our penetration...
Route Leak Detection Overview This project intends to help to detect BGP full view route leaks. A route leak occurs when an AS advertises, usually by accident, some prefixes it learned from others. As...
Secure Your Connection
