Web Information Gathering / Web Vulnerability Analysis
by do son · Published May 22, 2020 · Last modified October 11, 2021
opulence: Automation platform for open-source intelligence Collectors are responsible for collecting data across many different OSINT sources List of implemented collectors: Name description badips check if ip is blacklisted. (ex:...
quiver Quiver is an opinionated and curated collection of commands, notes, and scripts I use for bug bounty hunting. Features ZSH / Oh-My-ZSH shell plugin Tab auto-completion Prefills the command...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published May 20, 2020 · Last modified September 14, 2020
Searpy Search Engine Toolkit Support search engine Shodan Fofa Zoomeye Censys Dnsdb Google Baidu Bing 360so Goo Yahoo Changelog v2.3 fix some bugs add fofa_icon module Install git clone https://github.com/j3ers3/Searpy...
Sharingan Sharingan is a recon multitool for offensive security/bug bounty Install go get github.com/leobeosab/sharingan/cmd/sharingancli Usage Note Order matters when it comes to flags it must be sharingancli [globalflags] command [commandflags] if...
SocialPwned SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin, and Twitter to find the possible credential leaks...
subjs subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more. It’s recommended to pair this with gau...
OneForAll OneForAll is a powerful subdomain collection tool The importance of information collection in penetration testing is self-evident. Subdomain collection is an essential and very important part of information collection....
Scylla – The Simplistic Information Gathering Engine Scylla is an OSINT tool developed in python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers,...
Universal Reddit Scraper This is a universal Reddit scraper that can scrape Subreddits, Redditors, and comments on posts. Scrape speeds will be determined by the speed of your internet connection....
BirDuster BirDuster is a Python-based knockoff of the original DirBuster. BirDuster is a multi-threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published April 28, 2020 · Last modified May 23, 2022
hakrawler What is it? hakrawler is a Go web crawler designed for easy, quick discovery of endpoints and assets within a web application. It can be used to discover: Forms...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published April 20, 2020 · Last modified July 1, 2020
wsltools – Web Scan Lazy Tools wsltools is an elegant and simple Web Scan auxiliary library for Python. Changelog v0.2.4 update urlclean.mixPayload Install >>> pip install wsltools Use User Guide...
Information Gathering / Web Information Gathering
by do son · Published April 19, 2020 · Last modified October 25, 2022
RedRabbit RedRabbit is a PowerShell script aimed at helping pentesters conduct ethical hacking #RedTeam. The aim is to highlight just how Powerful PowerShell is and how it can be used...
ParamSpider: Parameter miner for humans ParamSpider allows you to fetch URLs related to any domain or a list of domains from Wayback archives. It filters out “boring” URLs, allowing you...
GitHound GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. It has earned me over $4000 applied to Bug Bounty...
Support Securityonline.info site. Thanks!
