Security Training Share
twa A tiny web auditor with strong opinions. Install Docker twa can be used from a lightweight (29MB) Alpine Docker container. To install it from Docker Hub: $ docker pull trailofbits/twa or, to build it manually: $...
sslscan tests SSL/TLS enabled services to discover supported cipher suites. This is a fork of ioerror’s version of sslscan. Changes are as follows: Highlight SSLv2 and SSLv3 ciphers in output. Highlight CBC ciphers on SSLv3 (POODLE)....
gitleaks – Check git repos for secrets and keys Changelog v1.12.1 Features Show program usage when no arguments are provided Exit program after the -h or –help options are used v1.0.0 Performance Prior to...
Shodan client for JavaScript API 👀 The content of the result is the same provided by the HTTP API. You can check them in the API documentation. version Library version. async host(ip, key, opts) Returns all...
PyLazyS3 A Python port of the original lazys3 tool to enumerate AWS S3 buckets using different permutations, originally created by @NahamSec. It utilizes the asyncio and aiohttp libraries to handle multiple high concurrency requests with great efficiency. Installation git clone https://github.com/Den1al/PyLazyS3.git...
Danger zone Correlate data between domains, ips and email addresses, present it as a graph and store everything into Elasticsearch and JSON files. Cases Based on given email, check for associate domains and then...
ReconDog Recon Dog is an all in one tool for all your basic information gathering needs. It uses APIs to gather all the information so your identity is not exposed. Main Features Wizard +...
Gitem is a tool for performing Github organizational reconnaissance. This could include information for: OSINT Spearphishing Recruitment Competitive analysis OPSEC self-assessment Changelog [0.8.0] – 2018-10-12 Added The –output flag which supports JSON output Installing $...
Tachyon is a Fast Multi-Threaded Web Discovery Tool. The main goal of it is to help webadmins find leftover files in their site installation, permission problems and web server configuration errors. It is not...
theHarvester What is this? ————- theHarvester is a tool for gathering e-mail accounts, subdomain names, virtual hosts, open ports/ banners, and employee names from different public sources (search engines, PGP key servers). Is a...
Github-Hunter This tool is for sensitive information searching on Github. Installation Requirements Python 3.x 1.git clone https://github.com/Hell0W0rld0/Github-Hunter.git 2.cd Github-Hunter 3.pip install virtualenv 4.virtualenv –python=/usr/local/bin/python3 env 5.source venv/bin/activate 6.pip install -r requirements Settings Before using...
TIDoS Framework TIDoS Framework is a comprehensive web application audit framework with some serious perks. Highlights:- The main highlights of this framework are: Basic first release (but huge). Has 4 main phases, subdivided into 13...
detectem is a specialized software detector. detectem is an open-source project written in Python and powered by Splash, an open-source project developed by Scrapinghub to render web pages with a lot of great features, including Javascript support and a convenient API. detectem uses Splash to render...
Shodan is a search engine for Internet-connected devices. Google lets you search for websites, Shodan lets you search for devices. This library provides developers easy access to all of the data stored in Shodan...
