Wapiti works as a “black-box” vulnerability scanner, that means it won’t study the source code of web applications but will work like a fuzzer, scanning the pages of the deployed web application, extracting links...
CertGraph A tool to crawl the graph of certificate Alternate Names CertGraph crawls SSL certificates creating a directed graph where each domain is a node and the certificate alternative names for that domain’s certificate...
JFScan The JFScan is a wrapper around a super-fast port scanner Masscan. It’s designed to simplify work when scanning for open ports on targets in mixed formats, including domain names. Some useful modules are...
What the heck is a ferox anyway? Ferox is short for Ferric Oxide. Ferric Oxide, simply put, is rust. The name rustbuster was taken, so I decided on a variation. What’s it do tho?...
cf-check Check a Host is Owned by Cloudflare. Changelog v2.0.1 c70510a db: Update DB (#12) aec3b29 scripts: Parse all instead (proxied possibility) (fix #8) Install ▶ go get -u github.com/dwisiswant0/cf-check Usage ▶ echo “uber.com” | cf-check or...
EMAGNET Emagnet is a very powerful tool for its purpose which is to capture email addresses and passwords from leaked databases uploaded on pastebin. It’s almost impossible to find leaked passwords when they are...
Credential Digger Credential Digger is a GitHub scanning tool that identifies hardcoded credentials (Passwords, API Keys, Secret Keys, Tokens, personal information, etc), filtering the false positive data through machine learning models. It supports Python...
Infoooze Infoooze is an Information collection tool (OSINT) in NodeJs. It provides various modules that allow efficient searches. Features Insta Recon Subdomain Scanner Ports Scan User Recon Mail finder Exif metadata extract Whois Lookup...
sub3suite Sub3 Suite is a research-grade suite of tools for Subdomain Enumeration, OSINT Information gathering & Attack Surface Mapping. Supports both manual and automated analysis on a variety of target types with many available...
graphw00f – GraphQL Server Fingerprinting graphw00f is a Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint. How does it work? graphw00f...
