RecurseBuster rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments Features HEAD Based Checks For servers the support it,…
View More recursebuster: rapid content discovery tool for recursively querying webservers
htrace.sh Simple shell script to debugging http/https traffic tracing and response headers. Support external security tools: Mozilla Observatory and SSL Labs API. It is useful…
View More htrace.sh v1.1.5 releases: debugging http/https traffic tracing & response headers
gitleaks – Check git repos for secrets and keys Gitleaks provides a way for you to find unencrypted secrets and other unwanted data types in…
View More gitleaks v2.0 releases: Searches full repo history for secrets and keys
PhoneInfoga Information gathering & OSINT reconnaissance tool for phone numbers. One of the most advanced tools to scan phone numbers using only free resources. The…
View More PhoneInfoga v1.6.7 releases: Information gathering & OSINT reconnaissance tool for phone numbers
linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username…
View More linkedin2username v0.15 releases: Generate username lists for companies on LinkedIn
The OWASP Amass tool suite obtains subdomain names by scraping data sources, recursive brute forcing, crawling web archives, permuting/altering names and reverse DNS sweeping. Additionally,…
View More amass v2.9.9 releases: In-depth subdomain enumeration written in Go
ffuf – Fuzz Faster U Fool A fast web fuzzer written in Go. Heavily inspired by the great projects gobuster and wfuzz. Features Fast! Allows fuzzing of HTTP…
View More ffuf v0.9 releases: Fast web fuzzer written in Go
Arjun Arjun is a python script for finding hidden GET & POST parameters using regex and bruteforce. Features Multi-threading 3 modes of detection Regex powered…
View More Arjun v1.4 releases: finding hidden GET & POST parameters
Interlace Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. Changelog v1.3.4 New Features and Improvements Added…
View More Interlace v1.3.4 releases: a power information gathering tool
Shodan is a search engine for Internet-connected devices. Google lets you search for websites, Shodan lets you search for devices. This library provides developers easy…
View More shodan-python v1.12.1 release: official Python library for Shodan