ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

Chasseur de domaines Auteurs : Joe Vest @joevest et Andrew Chiles @andrewchiles La sélection de noms de domaine est un aspect important de la préparation pour les tests d'intrusion et surtout pour les engagements Red Team. Généralement, les domaines qui ont été utilisés auparavant à des fins...

mailchecker

MailChecker Validation d'email multilingue. Alimenté par une base de données de plus de 55 000 domaines d'email jetables. Validez le format de votre email utilise l'expression régulière d'email de validator.js en dessous et FILTERVALIDATEEMAIL pour PHP Validez si l'email n'est pas un email...

dga-collection

Коллекция DGA Коллекция известных алгоритмов генерации доменов: Torpig ZeusBot Cryptolocker Necurs Symmi Ranbyus Использование Для каждого DGA список доменов легко генерируется: from datetime import date from Necurs import Necurs Compute domains for the current day/period: Necurs.domains Compute...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more Coded with 💙 by edoardottt Share on Twitter! Install • Usage • Get Started • Changelog • Contributing • License Installation 📡 Homebrew brew install cariddi Snap sudo snap install caridd...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program mallory -config path/to/config.jso...

socgholish_finder

SocGholish Finder Простой скрипт для сканирования веб-сайта на наличие инъекции SocGholish. Он проверяет и отображает инъекцию, если она найдена, а также деобфусцирует и показывает теневые URL-домены. usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

Minesweeper

Плагин для Burp Suite BApp, помогающий обнаруживать скрипты, загружаемые с более чем 23000+ вредоносных доменов для майнинга криптовалют криптоджекинг. Сводка Minesweeper будет пассивно сканировать объекты в пределах области видимости, проверяя их на соответствие более чем 23000+ известным домена...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

EvilURL

EvilURL v3.0 Générer des domaines unicode pour l'attaque par homographie IDN et les détecter. EvilURL est distribué sous licence BSD. Voir LICENSE pour plus de détails. CLONER git clone https://github.com/UndeadSec/EvilURL.git INSTALLER pip install python-nmap python-whois EXÉCUTION cd EvilURL...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

Dumb

Dumb - Bruteur de Dumains Un outil pour bruteforcer des dumains ! Dumb Comment DUMB fonctionne : Dumb fonctionne avec un dumain masqué pour substitution. Le dumain peut avoir autant de masques que vous le souhaitez, tant que vous fournissez les listes de mots correspondantes. Par exemple :...