Security Training Share
Subzy Subdomain takeover tool which works based on matching response fingerprints from can-i-take-over-xyz Installation git clone https://github.com/LukaSikic/subzy Use An only required flag is either –target or –targets –target (string) – Set single or multiple (comma separated) target subdomain/s...
Mitaka Mitaka is an OSINT friendly IOC (Indicator of Compromise) search tool. It works as a Chrome extension and it makes possible to search / scan IOC via the context menu. Features Supported IOC...
gitleaks – Check git repos for secrets and keys Gitleaks provides a way for you to find unencrypted secrets and other unwanted data types in git source code repositories. As part of its core...
Aleph is a tool for indexing large amounts of both documents (PDF, Word, HTML) and structured (CSV, XLS, SQL) data for easy browsing and search. It is built with investigative reporting as a primary use...
The OWASP Amass tool suite obtains subdomain names by scraping data sources, recursive brute forcing, crawling web archives, permuting/altering names and reverse DNS sweeping. Additionally, Amass uses the IP addresses obtained during resolution to...
GCPBucketBrute A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script (optionally) accepts GCP user/service account credentials and a keyword....
CrossLinked LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing. CrossLinked simplifies the processes of...
Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of the related information. It isn’t...
rustbuster DirBuster for Rust. It ended up by becoming a collection of modules useful in a different situation. Having a single executable suitable for most common web fuzzing tasks is very handy. At the...
nmap-parse-output Converts/manipulates/extracts data from a nmap scan output. Changelog v1.5.1 More reliable SSL/TLS detection More reliable HTTP(s) port detection Added group-by-service command Added group-by-product command Added http-info command Added http-server-header to port-info command Added...
ATSCAN SCANNER Advanced Search / Dork / Mass Exploitation Scanner Description Search engine Google / Bing / Ask / Yandex / Sogou ● Mass Dork Search ● Multiple instant scans. ● Mass Exploitation ●...
pdlist pdlist is a passive subdomain finder written in python. This tool can be used effectively to collect information about a domain without ever sending a single packet to any of its hosts. Given...
Instagram OSINT Tool The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn’t be able to get from just looking at their profile. The information includes: Username...
identYwaf is an identification tool that can recognize web protection type (i.e. WAF) based on blind inference. The blind inference is being done by inspecting responses provoked by a set of predefined offensive (non-destructive) payloads,...
