CloudFrunt CloudFrunt is a tool for identifying misconfigured CloudFront domains. CloudFront is a Content Delivery Network (CDN) provided by Amazon Web Services (AWS). CloudFront users create “distributions” that serve content from specific sources (an...
Web Information Gathering / WebApp PenTest
by do son · Published April 5, 2018 · Last modified June 15, 2018
SubOver Subover is a Hostile Subdomain Takeover tool originally written in python but rewritten from scratch in Golang. Since it’s redesign, it has been aimed at speed and efficiency in mind. Till date, SubOver...
AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It’s similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features...
Truffle Hog Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. NEW Trufflehog previously functioned by running entropy checks on git diffs....
Web Information Gathering / WebApp PenTest
by do son · Published April 1, 2018 · Last modified October 25, 2022
Birdwatcher is a data analysis and OSINT framework for Twitter. It supports creating multiple workspaces where arbitrary Twitter users can be added and their Tweets harvested through the Twitter API for offline storage and analysis....
Information Gathering / Web Information Gathering
by do son · Published March 28, 2018 · Last modified January 15, 2024
pagodo (Passive Google Dork) – Automate Google Hacking Database scraping The goal of this project was to develop a passive Google dork script to collect potentially vulnerable web pages and applications on the Internet....
Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published March 28, 2018
Bishop Bishop is a vulnerability scanner that searches websites in the background while you browse, looking for exposed version control systems, misconfigured administrative tools, and more. It works by searching for files with a...
SafeSQL is a static analysis tool for Go that protects against SQL injections. How does it work? SafeSQL uses the static analysis utilities in go/tools to search for all call sites of each of the query functions in...
Web Information Gathering / WebApp PenTest
by do son · Published March 21, 2018 · Last modified June 3, 2018
Th3inspector Tool All in one tool for Information Gathering Installation Window Linux Android Download Termux Usage perl Th3inspector.pl -h -i –info Website Information -n –number Phone...
Exploitation / Network PenTest / Web Exploitation / WebApp PenTest
by do son · Published March 20, 2018
msf-autopwn Performs or reads a Nmap scan then automatically exploits machines that contain some of the most common vulnerabilities. Installation This install is only tested on Kali. Clone into the repo, enter the cloned...
Exploitation / Information Gathering / Network PenTest / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published March 18, 2018
EternalView EternalView is an all in one basic information gathering tool Features: Feature Explanation Whois Information Prints the whois information of the entered web address DNS lookup Prints the DNS information and web records...
Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published March 15, 2018
Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs (and other data) that match some specific rules, or respond in a specific way. Installation Go version >=...
dvcs-ripper Rip web accessible (distributed) version control systems: SVN, GIT, Mercurial/hg, bzr, … It can rip repositories even when directory browsing is turned off. Make sure to position yourself in the empty directory where...
Web Information Gathering / WebApp PenTest
by do son · Published March 13, 2018 · Last modified April 21, 2018
FileSensor Dynamic file detection tool based on crawler Feature Generate the fuzzing vectors based on crawler results (input)http://localhost/ -> (crawl)http://localhost/test.php -> (detect)http://localhost/.test.php.swp Scrapy framework Stable crawler and customizable HTTP requests. Custom 404 filter Use a regular...
Cangibrina is a multi-platform tool which aims to obtain the Dashboard of sites using brute-force over wordlist, google, nmap, and robots.txt. Install git clone http://github.com/fnk0c/cangibrina.git cd cangibrina pip install -r requirements.txt Usage Copyright...
Secure Your Connection
