h2spec h2spec is a conformance testing tool for HTTP/2 implementation. This tool is compliant with RFC 7540 (HTTP/2) and RFC 7541 (HPACK). Changelog v2.6.0 Build with Go 1.14 Validate only the length of...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published June 9, 2019 · Last modified April 24, 2023
The operative framework is a digital investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add a note to...
Git Fingerprint is a web fingerprinting tool that attempts to scan a target based on the files a git repository by enumerating over all files ever found in the public...
Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains deployed by specific organizations and issued...
Exploitation / Information Gathering / Web Exploitation / Web Information Gathering
by do son · Published June 6, 2019 · Last modified October 25, 2022
shodansploit Shodan is a search engine on the internet where you can find interesting things all over the world. For example, we can find cameras, bitcoin streams, zombie computers, ports...
Reporting / Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published June 5, 2019
Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On...
Cloudflare Resolver A comprehensive pentest tool that checks Cloudflare enabled sites for origin IP leaks. It’s filled with awesome features! scan a wide array of miss-configuration and vulnerabilities search other...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published June 4, 2019 · Last modified October 10, 2021
Sitadel – Web Application Security Scanner Sitadel is basically an update for WAScan making it compatible for python >= 3.4. It allows more flexibility for you to write new modules...
Information Gathering / Web Information Gathering
by do son · Published June 4, 2019 · Last modified October 10, 2021
ipv666 ipv666 is a set of tools that enables the discovery of IPv6 addresses both in the global IPv6 address space and in more narrow IPv6 network ranges. These tools are...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published June 4, 2019 · Last modified August 19, 2019
Interlace Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. Changelog v1.6 New Features and Improvements Introduced _random_ in #58 Introduced _blocker_ and _block:xyz_ in #60 Bug Fixes Fix Arguments.output...
cloud_enum Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. Currently enumerates the following: Amazon Web Services: Open S3 Buckets Protected S3 Buckets Microsoft Azure: Storage Accounts...
Web Information Gathering / WebApp PenTest
by do son · Published June 2, 2019 · Last modified May 1, 2024
Fingerprinter This script goal is to try to find the version of the remote application/third party script etc by using a fingerprinting approach. Currently Supported Apps Apache Icons [CVEs] Version...
Sputnik OSINT Extension Sputnik is an extension to quickly and easily search IPs, Domains, File Hashes, and URLs using free Open Source Intelligence (OSINT) resources. OSINT Resources The following OSINT...
karma Find leaked emails with your passwords. Install # install dependencies (Debian/Ubuntu) sudo apt install tor python3 python3-pip # restart Tor service sudo service tor restart # clone this repository...
LeakLooker Find open databases with Shodan. With LeakLooker you can find publicly open MongoDB, CouchDB and Elasticsearch database, it also includes Kibana instances. The script parses results from Shodan, excluding...
Support Securityonline.info site. Thanks!
