filebuster: An extremely fast and flexible web fuzzer
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is an HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It...
Category: Web Information Gathering
OSINT-SPY: Performs OSINT scan on email/domain/ip_address/organization
OSINT-SPY Search using OSINT(Open Source Intelligence) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cybercrime investigator in order to find deep information about...
theHarvester 3.0.1 released: E-mails/subdomains/names Harvester – OSINT
theHarvester What is this? ————- theHarvester is a tool for gathering e-mail accounts, subdomain names, virtual hosts, open ports/ banners, and employee names from different public sources (search engines, PGP key servers). Is a...
pyfiscan: Free web-application vulnerability and version scanner
Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users’ installations to keep...
Intel-One: passive reconnaissance command line tool
Intel-One Conceived and developed a passive reconnaissance command line tool able to gather information from a variety of sources to link a target domain, company or individual to publicly available information. Reduced manual user...
aquatone v1.4.2 release: A Tool for Domain Flyovers
Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Changelog 1.4.2 Added Responsive URLs are now...
drupwn v1.0.1 release: Drupal enumeration tool
Drupwn Drupwn claims to provide an efficient way to gather Drupal information. It is a python script, following a modular architecture for maintenance and enhancement purposes, which allows enumerating various kind of information that...
gasmask v1.4.1 releases: Information gathering tool – OSINT
gasmask All in one Information gathering tool – OSINT Written by: maldevel (twitter) Information Gathering ask bing crt dns dogpile github google googleplus instagram linkedin netcraft pgp reddit reverse dns twitter vhosts virustotal whois yahoo yandex...
CMSScan: Scan WordPress, Drupal, Joomla, vBulletin websites for Security issues
CMSScan Scan WordPress, Drupal, Joomla, vBulletin websites for Security issues. CMSScan provides a centralized Security Dashboard for CMS Security scans. It is powered by wpscan, droopescan, vbscan and joomscan. It supports both on-demand and...
InDigger: web scraping tool for LinkedIn
InDigger InDigger is a web scraping tool for LinkedIn. Given a company name, it goes through a predefined list of departments and returns the employees, their job title, their work experience, and their education....
Sn1per v6.0 releases: Automated Pentest Recon Scanner
Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security’s premium reporting add-on for Professional Penetration Testers, Bug...
getaltname v3.0.11 releases: Extract subdomains from SSL certificates in HTTPS sites
GetAltName (or GAN) is a tool that can extract Subject Alternative Names found in SSL Certificates directly from HTTPS websites which can provide you with DNS names (subdomains) or virtual servers. This code extract subdomain names from https sites and return...
TIDoS-Framework v1.7 releases: A comprehensive web-app audit framework
TIDoS Framework TIDoS Framework is a comprehensive web application audit framework with some serious perks. Highlights:- The main highlights of this framework are: Basic first release (but huge). Has 4 main phases, subdivided into 13...
wfuzz v2.3.1 release: Web application fuzzer
Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given...
