Security Training Share
gitleaks – Check git repos for secrets and keys Gitleaks provides a way for you to find unencrypted secrets and other unwanted data types in git source code repositories. As part of its core...
Ultimate Facebook Scraper (UFS) Tooling that automates your social media interactions to collect posts, photos, videos, friends, followers and much more on Facebook. Features A bot which scrapes almost everything about a Facebook user’s profile including...
Recsech – Web Reconnaissance Tools Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github....
Findomain findomain is a cross-platform tool that uses Certificates Transparency logs to find subdomains. We currently support Linux, Windows, and MacOS. How does it work? It tool doesn’t use the common methods for sub(domains)...
FOCA FOCA (Fingerprinting Organizations with Collected Archives) is a tool used mainly to find metadata and hidden information in the documents its scans. These documents may be on web pages and can be downloaded...
Sherlock Find usernames across social networks List Of Supported Sites (179 Sites In Total!) 2Dimensions 500px 9GAG About.me Academia.edu Anobii Aptoide Archive.org AskFM BLIP.fm Badoo Bandcamp Basecamp Behance BitBucket BitCoinForum Blogger Brew BuyMeACoffee BuzzFeed Canva...
The OWASP Amass tool suite obtains subdomain names by scraping data sources, recursive brute forcing, crawling web archives, permuting/altering names and reverse DNS sweeping. Additionally, Amass uses the IP addresses obtained during resolution to...
ffuf – Fuzz Faster U Fool A fast web fuzzer written in Go. Heavily inspired by the great projects gobuster and wfuzz. Features Fast! Allows fuzzing of HTTP header values, POST data, and different parts of URL,...
AIL framework – Framework for Analysis of Information Leaks AIL is a modular framework to analyze potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured data streams....
Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System (DNS) Domain Names – Concepts and Facilities Domain Names – Implementation and Specification Threat Analysis of the Domain Name...
