ReconDog

ReconDog 정찰 만능 도구 주요 기능 마법사 + CLA 인터페이스 STDIN파이프 입력에서 대상을 추출하고 처리할 수 있습니다. 모든 정보는 API를 통해 추출되며, 대상에 직접 접촉하지 않습니다. 유틸리티 Censys: censys.io를 사용하여 IP 주소에 대한 방대한 정보를 수집합니다. NS Lookup: 네임 서버 조회를 수행합니다. Port Scan: 가장 일반적인 TCP 포트를 스캔합니다. Detect CMS: 400개 이상의 콘텐츠 관리 시스템을 탐지할 수 있습니다. Whois lookup: whois 조회...

CMSeeK

CMS란? 콘텐츠 관리 시스템CMS은 디지털 콘텐츠의 생성과 수정을 관리합니다. 일반적으로 여러 사용자가 협업 환경에서 사용할 수 있도록 지원합니다. 주목할 만한 예로는 WordPress, Joomla, Drupal 등이 있습니다. 릴리스 기록 root@kitploit: - Version 1.1.3 25-07-2020 - Version 1.1.2 19-05-2019 - Version 1.1.1 01-02-2019 - Version 1.1.0 28-08-2018 - Version 1.0.9 21-08-2018 - Version...

Spartan

Spartan プロ級のリコン Wiki • 使い方 • ギャラリー 機能 Aquatone と Sublist3r を使用したサブドメインスキャン ライブサイトのみの Httprob オープンポートの Masscan CMSeeK を使用した CMS の識別 waybackMachine からの URL 取得 Aquatone を使用したスクリーンショット Dirsearch を使用したディレクトリとファイルのブルートフォース Cors スキャン 全サイトへの PUT メソッドの試行 S3 バケットのブルートフォースとスキャン Vhost スキャン サブドメイン列挙のさらなる方法...

XAttacker

XAttacker V2.5 툴 무료 XATTACKER 웹 애플리케이션의 취약점을 스캔하고 자동으로 익스플로잇할 수 있는 대규모 익스플로잇 도구입니다. 대상 웹사이트를 제공하면 도구가 자동으로 아키텍처를 감지하여 콘텐츠 관리 서비스CMS를 사용하는지 확인하고, 감지된 CMS를 기반으로 취약점을 찾습니다. 취약점을 찾은 후 도구는 웹사이트에 대한 익스플로잇을 생성하고 사용자에게 익스플로잇 링크를 전송합니다. XAttacker V2.5 툴 무료 익스플로잇 목록 • 사용법 • 튜토리얼 • 사용법 이 도구는 교육 목적으로만 사용됩니다...

CMSsc4n

CMSsc4n 도메인이 CMS를 가지고 있는지 식별하고 버전을 확인하는 도구입니다. 현재 CMSsc4n이 지원하는 CMS는 WordPress,Moodle,Joomla,Drupal 및 Prestashop입니다. 설치 You can download the latest version of CMSsc4n by cloning the GitHub repository: root@kitploit: git clone https://github.com/n4xh4ck5/CMSsc4n.git Install the dependencies via pi...

inforfinder

Inforfinder =========== Inforfinder is a tool made to collect information of any domain pointing at a server ip,domain,range,file. Requires python libs: pyRequests, lxml and py3DNS You can do the installation, with pip or you can install the inforfinder app as a package using python setup.py...

WhatCMS

WhatCMS.sh CMS検出およびエクスプロイトキット - Whatcms.org APIに基づく。 はじめに Whatcms.shは現在、330以上のCMS アプリケーションとサービスの使用を検出し、その後、検出されたCMSに対して有効なセキュリティ監査ツールのリストを示します。 ツールを使用するにはwhatcms.org APIが必要です： APIキーを取得 使用方法 Usage: ./whatcms.sh example.com root@kitploit: -h ヘルプメッセージを表示 -wh ホスティング詳細を確認 --tools ツール情報を表示 情報 検出可能なCMS...

CMS_Detector

CMSDetector Python2 寄付 : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

InfoLeak-Scanner

InfoLeak-Scanner Docker まず初めに docker run --rm -p 8000:80 siwecos/infoleak-scanner を実行します。 ブラウザを開き、スキャナーを使用します: http://localhost/?url= インストール php5、curl、およびWebサーバーを入手します: root@kitploit: sudo apt-get install apache2 php5 php5-curl アプリケーションをWebサーバーにコピーします: root@kitploit: cp -R . /var/www/html/ 何をするもの...

Ashok

Ashok 极快速侦察瑞士军刀 📌 简介 侦察 是渗透测试的第一阶段，即在计划任何实际攻击之前收集信息。Ashok 是一款为渗透测试人员设计的极快速侦察工具，专门用于侦察阶段。在 Ashok-v1.1 中，您可以找到 高级 Google 搜索语法工具 和 Wayback 爬取引擎。 💥 主要功能 root@kitploit: - Wayback Crawler Machine - Google Dorking without limits - Github Information Grabbing - Subdomain Identifier - Cms/Technology...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

FoolishScan

Foolish Scan v2.3 Gold Master Context-Aware CTF & Lab Re...

FoolishScan-

Foolish Scan v2.3 Gold Master Context-Aware CTF & Lab Re...

pathbrute

This is an exploit module/toolkit targeting web servers, specifically designed to brute force directories and files names. The tool, named "pathbrute," uses wordlists from Exploit databases and Metasploit to identify interesting content on servers, including potentially vulnerable websites. It ca...

HawkScan - Security Tool For Reconnaissance And Information Gathering On A Website

Security Tool for Reconnaissance and Information Gathering on a website. python 2.x & 3.x This script use "WafW00f" to detect the WAF in the first step https://github.com/EnableSecurity/wafw00f This script use "Sublist3r" to scan subdomains https://github.com/aboul3la/Sublist3r This script use...

WAES - Auto Enums Websites And Dumps Files As Result

Doing HTB or other CTFs enumeration against targets with HTTPS can become trivial. It can get tiresome to always run the same script/tests on every box eg. nmap, nikto, dirb and so on. A one-click on target with automatic reports coming solves the issue. Furthermore, with a script the enum proces...

VulnX v1.7 - An Intelligent Bot Auto Shell Injector That Detect Vulnerabilities In Multiple Types Of CMS

VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms, fast cms detection, information gathering and vulnerability Scanning of the target like subdomains, IP addresses, country, org, timezone,...

CMSeeK v1.1.2 - CMS Detection And Exploitation Suite - Scan WordPress, Joomla, Drupal And Over 170 Other CMSs

What is a CMS? A content management system CMS manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc. Release History - Version 1.1.2 19-05-2019 - Version 1.1.1...

CMSeeK v1.1.1 - CMS Detection And Exploitation Suite (Scan WordPress, Joomla, Drupal And 150 Other CMSs)

What is a CMS? A content management system CMS manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc. Release History - Version 1.1.1 01-02-2019 - Version 1.1.0...

The Offensive Web Application Penetration Testing Framework: TIDoS

TIDoS Framework is a comprehensive web-app audit framework. TIDoS is made to be comprehensive and versatile. It is a highly flexible framework where you just have to select and use modules. But before that, you need to set your own API KEYS for various OSINT purposes. To do so, open up APIKEYS.py...