Category: Web Information Gathering
Offensive ELK: Elasticsearch for Offensive Security Traditional “defensive” tools can be effectively used for Offensive security data analysis, helping your team collaborate and triage scan results. In particular, Elasticsearch offers...
Sensitive info scan tool of Github Function introduction and design GitPrey is a tool for searching sensitive information or data according to company name or keyword something.The design mind is...
HackerTarget ToolKit Use open source tools and network intelligence to help organizations with attack surface discovery and identification of security vulnerabilities. Identification of an organization’s vulnerabilities is an impossible task...
Drupwn Drupwn claims to provide an efficient way to gather Drupal information. It is a python script, following a modular architecture for maintenance and enhancement purposes, which allows enumerating various...
GitHacker This is a multiple threads tool to detect whether a site has git source leaks, and has the ability to download the site source to the local This tool...
IPOsint Discovery IP Address space of the target IPOsint allows you to discover the IP Address of the target from a great resource without register or any API key The...
TLD Scanner TLD Scanner scans for all existing top-level domains for a given domain name. Download git clone https://github.com/ozzi-/tld_scanner.git Use ./tld_scanner.py Switch Description -d <domain> Specifiy the domain name, example: “google”...
SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time...
dt DNS tool that displays information about your domain. Features common records scanning (use -scan) validate DNSSEC chain (use -debug to see more info) change query speed for scanning (default...
Zen – Find email addresses of Github users Download git clone https://github.com/s0md3v/Zen.git Use Find email address of a user python zen.py username or python zen.py https://github.com/username Find email addresses of contributors...
Punter (passive hunter) helps with the first step in footprinting a domain. The idea is not to touch the target domain but passively find a good initial amount of information...
S3Scanner A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Custom The tool takes in a list of bucket names to...
Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between...
SlackPirate – Slack Enumeration and Extraction Tool This is a tool developed in Python which uses the native Slack APIs to extract ‘interesting’ information from a Slack workspace given an...
Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency (CT) is an experimental IETF standard. The goal of it was to allow the public to audit...