catphish

CATPHISH توليد نطاقات مشابهة لهجمات التصيد. التحقق من النطاقات المنتهية صلاحيتها وحالة تصنيفها لتجنب تصنيف الوكيل. النطاقات المدرجة في القائمة البيضاء مثالية لخوادم C2 الخاصة بك. مثالية لمهام الفريق الأحمر. التثبيت bundle install الخوارزميات الحالية SingularOrPluralise prependOrAppend...

hijagger

hijagger - vérifie les registres de paquets pour des paquets détournables Cet outil vérifie chaque mainteneur de chaque paquet des registres NPM et Python Pypi pour détecter des domaines non enregistrés ou des enregistrements MX non enregistrés sur ces domaines. Si un domaine n'est pas enregistré...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

Invoke-DNSteal

Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over UDP and TCP, and lets you control the size of queries using random delay. Also, allows you to avoid detections by using random domains in each of your queries and you c...

blackout-public

ZoomInfo GTM Studio: Pre-Consent Tracking Documentation "You can block the researcher. You can't block the evidence." What Happened On November 25, 2025, ZoomInfo CEO Henry Schuck posted a product demo of GTM Studio on LinkedIn — their AI-powered platform that "identifies person-level website...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 Repository with everything I have tracking the impact of MOVEit CVE-2023-34362 Includes possibly affected organizations and domains utilizing SFTP header and cookie discovery methods. I've also built a news ticker which tracks new stories about MOVEit, available at...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

domainhunter

صائد النطاقات المؤلفان جو فيست @joevest وأندرو تشايلز @andrewchiles اختيار اسم النطاق هو جانب مهم من التحضير لاختبارات الاختراق وخاصة مهام الفريق الأحمر. عادةً، يمكن شراء النطاقات التي استُخدمت سابقًا لأغراض غير ضارة وتم تصنيفها بشكل صحيح ببضعة دولارات فقط. يمكن لمثل هذه النطاقات أن تسمح للفريق...

dga-collection

مجموعة DGA مجموعة من خوارزميات توليد النطاقات المعروفة: Torpig ZeusBot Cryptolocker Necurs Symmi Ranbyus الاستخدام لكل DGA، يمكن توليد قائمة النطاقات بسهولة: from datetime import date from Necurs import Necurs Compute domains for the current day/period: Necurs.domains Compute domains for a given...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

socgholish_finder

SocGholish Finder Script simple pour analyser un site web à la recherche d'une injection SocGholish. Il vérifie et affiche l'injection si elle est trouvée, et désobfusque et affiche les domaines d'URL de shadowing usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finde...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

EvilURL

EvilURL v3.0 Generate unicode domains for IDN Homograph Attack and detect them. The EvilURL is released under a BSD-style license. See LICENSE for more details. CLONE git clone https://github.com/UndeadSec/EvilURL.git INSTALL pip install python-nmap python-whois RUNNING cd EvilURL python3...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

Dumb

Dumb - Dumain Bruteforcer A tool to bruteforce dumains! Dumb How DUMB works: Dumb works with a masked dumain for substitution. The dumain can have as many masks as you want as long as you pass the according wordlists. For example: Bruteforcing subdumains: Using the mask DUMB.dumain.com and the...