blackout-public

ZoomInfo GTM Studio: Pre-Consent Tracking Documentation "You can block the researcher. You can't block the evidence." What Happened On November 25, 2025, ZoomInfo CEO Henry Schuck posted a product demo of GTM Studio on LinkedIn — their AI-powered platform that "identifies person-level website...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 مستودع يضم كل ما لدي لتتبع تأثير ثغرة MOVEit CVE-2023-34362 يتضمن المنظمات والنطاقات التي قد تكون متأثرة، وذلك باستخدام طرق اكتشاف رأس SFTP والكوكيز. كما أنشأت شريط أخبار يتتبع الأخبار الجديدة حول MOVEit، وهو متاح على https://firehose.kenbuckler.com/moveit...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

uriDeep

uriDeep Unicode encoding attacks with machine learning. Tool based on machine learning to create amazing fake domains using confusables. Some domains can deceive IDN policies Chrome & Firefox. I created the best big dictionary of confusables using neural networks. It is used in the tool and it ca...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

صائد النطاقات المؤلفان جو فيست @joevest وأندرو تشايلز @andrewchiles اختيار اسم النطاق هو جانب مهم من التحضير لاختبارات الاختراق وخاصة مهام الفريق الأحمر. عادةً، يمكن شراء النطاقات التي استُخدمت سابقًا لأغراض غير ضارة وتم تصنيفها بشكل صحيح ببضعة دولارات فقط. يمكن لمثل هذه النطاقات أن تسمح للفريق...

dga-collection

مجموعة DGA مجموعة من خوارزميات توليد النطاقات المعروفة: Torpig ZeusBot Cryptolocker Necurs Symmi Ranbyus الاستخدام لكل DGA، يمكن توليد قائمة النطاقات بسهولة: from datetime import date from Necurs import Necurs Compute domains for the current day/period: Necurs.domains Compute domains for a given...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program mallory -config path/to/config.jso...

socgholish_finder

SocGholish Finder Script simple pour analyser un site web à la recherche d'une injection SocGholish. Il vérifie et affiche l'injection si elle est trouvée, et désobfusque et affiche les domaines d'URL de shadowing usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finde...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

EvilURL

EvilURL v3.0 Generate unicode domains for IDN Homograph Attack and detect them. The EvilURL is released under a BSD-style license. See LICENSE for more details. CLONE git clone https://github.com/UndeadSec/EvilURL.git INSTALL pip install python-nmap python-whois RUNNING cd EvilURL python3...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

Dumb

Dumb - Dumain Bruteforcer A tool to bruteforce dumains! Dumb How DUMB works: Dumb works with a masked dumain for substitution. The dumain can have as many masks as you want as long as you pass the according wordlists. For example: Bruteforcing subdumains: Using the mask DUMB.dumain.com and the...