kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

monsoon

monsoon A fast HTTP enumerator that allows you to execute a large number of HTTP requests, filter the responses and display them in real-time monsoon is a fast and flexible HTTP fuzzer that can be used for a wide variety of actions ranging from content discovery to credential bruteforcing. You ca...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

CWFF

CWFF - Custom wordlists for fuzzing CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage root@kitploit: CWFF -h...

crawpy

Crawpy Otra herramienta de descubrimiento de contenido escrita en Python. Qué hace diferente a esta herramienta de otras: Envía solicitudes HTTP asíncronas, rápido Modo de calibración, aplica filtros por sí mismo Modo de exploración recursiva con banderas adicionales Generación de informes, luego...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

cansina

Cansina Cansina es una aplicación de descubrimiento de contenido web. Es bien sabido que las aplicaciones web no publican todos sus recursos o enlaces públicos, por lo que la única forma de descubrir estos recursos es solicitarlos y verificar la respuesta. El deber de Cansina es ayudarte a hacer...

ffuf

ffuf - Fuzz Faster U Fool Un fuzzer web rápido escrito en Go. Instalación Ejemplo de uso Descubrimiento de contenido Descubrimiento de vhost Fuzzing de parámetros Fuzzing de datos POST Uso de mutador externo Archivos de configuración Ayuda Modo interactivo Instalación Descarga un binario...

kiterunner

Kiterunner Introducción Durante mucho tiempo, el descubrimiento de contenido se ha centrado en encontrar archivos y carpetas. Si bien este enfoque es efectivo para servidores web heredados que alojan archivos estáticos o responden con 3xx ante una ruta parcial, ya no es efectivo para aplicaciones...

rustbuster

rustbuster Un completo fuzzer web y herramienta de descubrimiento de contenido Introducción Lee el artículo del blog: Presentando Rustbuster — Un completo fuzzer web y herramienta de descubrimiento de contenido Descarga Puedes descargar binarios precompilados desde aquí. Instalación root@kitploit...

filebuster

Filebuster Un fuzzer web extremadamente rápido y flexible ¿Qué es? Filebuster es un script de fuzzing HTTP / descubrimiento de contenido con muchas características, diseñado para ser fácil de usar y rápido. Utiliza una de las clases HTTP más rápidas del mundo de PERL - Furl::HTTP. Además, el...

chameleon

Chameleon Chameleon provides better content discovery by using wappalyzer's set of technology fingerprints alongside custom wordlists tailored to each detected technologies. The tool is highly customizable and allows users to add in their own custom wordlists, extensions or fingerprints. The full...

vigolium v0.4.4

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

ctf-toolkit

Bug Bounty Recon Tool 🚀 The Ultimate Bug Bounty Recon Tool...

EUVD-2018-13477

Malware in sbrugna...

h1-ctf: [ Hacky Holidays CTF ] Completely taken down the Grinch Networks

Day 1 - Robot flag We're presented with sample ui page without any function. So I guessed content discovery is the best way to find flag. And robots.txt came to my mind and found the flag. https://hackyholidays.h1ctf.com/robots.txt Response User-agent: Disallow: /s3cr3t-ar3a Flag:...

h1-ctf: Hackyholidays CTF writeup

Writeup for the hackyholidays CTF This CTF consisted of 12 challenges released daily in the 12 days leading up to christmas. The goal was to stop the Grinch from ruining christmas by slowly destroying the apps that he used to terrorize Santa and his elfs. The challenges were: 1. Robots.txt 2. DOM...