Omnibus An Omnibus is defined as a volume containing several novels or other items previously published separately and that is exactly what the InQuest Omnibus project intends to be for Open Source Intelligence collection, research, and...
Programming / Web Vulnerability Analysis
by do son · Published August 16, 2018 · Last modified August 5, 2019
phpcs-security-audit phpcs-security-audit is a set of PHP_CodeSniffer rules that find vulnerabilities and weaknesses related to security in PHP code. It currently has core PHP rules as well as Drupal 7 specific rules. The tool also checks...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published August 15, 2018
FireShodanMap is a Real-time map that integrates Firebase, Google Maps, and Shodan. A search is carried out using Shodan searching for vulnerable devices and they are shown on the map for analysis. All data...
ODAT ODAT (Oracle Database Attacking Tool) is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid SIDs and credentials in order...
novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, Ruby, and python. Image: malware...
ICU is a tool to constantly keep an updated database of domains and subdomains, by regularly scanning domains for subdomains with the most common subdomain scanners. ICU works by creating a database with domains...
Skiptracer – OSINT scraping framework Initial attack vectors for recon usually involve utilizing pay-for-data/API (Recon-NG) or paying to utilize transforms (Maltego) to get data mining results. Skiptracer utilizes some basic python webscraping (BeautifulSoup) of...
OWASP DeepViolet TLS/SSL API DeepViolet is a TLS/SSL scanning API written in Java. To keep DeepViolet easy to use, identify bugs, reference implementations have been developed that consume the API. If you want to...
HackB0x v1.0 HackBox is the combination of awesome tools and techniques. This tool includes [1] – Xss [2] – Exploits [3] – Subdomain scanner [4] – Whois Lookup [5] – SSRF Injection [6] –...
Belati – The Traditional Swiss Army Knife For OSINT Belati is a tool for Collecting Public Data & Public Document from Website and other services for OSINT purpose. This tool is inspired by Foca...
git-all-secrets git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them,...
Pybelt is an open source hacker tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type verification tool Proxy finding tool XSS scanner It is capable of cracking...
Turbolist3r is a fork of the sublist3r subdomain discovery tool. In addition to all original OSINT capabilities of sublist3r, turbolist3r automates some of the results analysis, with a focus on subdomain takeover. Turbolist3r queries public DNS...
XSS Finder Some simple tools which I’m using frequently to find XSS. Keep in mind: Do not trust scripts only! Sometimes the vulnerability is more complex and needs special treatment 😉 Those scripts won’t find...
admin-finder Multi-threaded admin finder written in python Disclaimer: For Educational Purpose only. Use at your own risk, it is very easy to detect such attempts Features Check the robots.txt file, see if there is...
Secure Your Connection
