Information Security
twa A tiny web auditor with strong opinions. Install Docker twa can be used from a lightweight (29MB) Alpine Docker container. To install it from Docker Hub: $ docker pull trailofbits/twa or, to build it manually: $...
SubDomainizer SubDomainizer is a tool designed to find hidden subdomains and secrets present is either webpage, Github, and external javascript present in the given URL. This tool also finds S3 buckets, cloudfront URL’s and...
Monitorizer The ultimate subdomain monitorization framework Subdomain monitoring framework inspired by subalert project. Setting up the environment You need: Python >= 3.6 ( Python 2 is not supported ) Linux server e.g(Amazon EC2) [64bit] Before...
uDork uDork is a script written in Python that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on. It...
CloudBrute CloudBrute is a tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty hunters,...
TIGMINT: Twitter, Instagram, and Geo-Tagging Media Intelligence An OSINT (Open Source Intelligence) software framework with the objective of making cyber investigations more convenient by implementing abstraction mechanisms to hide the background technical complexity also bundling...
Slack Watchman Slack Watchman is an application that uses the Slack API to look for potentially sensitive data exposed in your Slack workspaces. Features It searches for, and reports back on: Externally shared channels...
Findomain findomain is a cross-platform tool that uses Certificates Transparency logs to find subdomains. We currently support Linux, Windows, and MacOS. How does it work? It tool doesn’t use the common methods for sub(domains)...
SubFinder SubFinder is a subdomain discovery tool that uses various techniques to discover massive amounts of subdomains for any target. It has been aimed at a successor to the sublist3r project. SubFinder uses Passive Sources,...
theHarvester What is this? ————- theHarvester is a tool for gathering e-mail accounts, subdomain names, virtual hosts, open ports/ banners, and employee names from different public sources (search engines, PGP key servers). Is a...
Suggested Reading