SearchOrg

SearchOrg By entering a company's email domain, information is obtained using DNS, NMAP and Shodan Keep in mind NMAP must be installed on the machine to use the command You must have a Shodan account and load the APIKey where the script indicates Configure the required libraries listed in the...

RootHelper

RootHelper Roothelper will aid in the process of privilege escalation on a Linux system that has been compromised. The latest version totals eleven scripts. From enumeration to exploit suggestion to exploit deployment. RootHelper ensures you have access to the best tools for the job. The credits...

linkedin-profile-scraper

Due to endpoint issues, the Linkedin Profile Scraper Tool is currently unavailable. Please check the below link for alternative method. Huge shout-out to gosecure Team. https://www.gosecure.net/blog/2021/05/27/step-by-step-how-to-deanonymize-emails-on-linkedin/ Linkedin Profile scraper TOOL...

Nosql-Exploitation-Framework

Nosql-Exploitation-Framework A FrameWork For NoSQL Scanning and Exploitation Framework NoSQL Exploitation Framework 2.02b Released Author NoSQL Exploitation Framework Authored By Francis Alexander Wiki NoSQL Exploitation Framework Wiki on Installation & Usage -...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

Get-ReconInfo

Get-ReconInfo NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat -ano ipconfig...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

indicator-intelligence

Indicator-Intelligence NOTA : Definitivamente debes usarlo para actividades legales. Por favor, consulta; USAGEPOLICY.md LICENSE Descripción Encuentra dominios relacionados y direcciones IPv4 para realizar inteligencia de amenazas después de que Indicator-Intelligence recolecte archivos estáticos...

bypass-firewalls-by-DNS-history

Bypass firewalls by abusing DNS history This script will try to find: the direct IP address of a server behind a firewall like Cloudflare, Incapsula, SUCURI ... an old server which still running the same inactive and unmaintained website, not receiving active traffic because the A DNS record is n...

CredNinja

This tool is intended for penetration testers who want to perform an engagement quickly and efficiently. While this tool can be used for more covert operations including some additions below, it really shines when used at the scale of a large network. At the core of it, you provide it a list of...

CVE-2023-5561-PoC

PoC CVE-2023-5561 - WordPress User Email Disclosure Description This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the /wp-json/wp/v2/users API endpoint. Requirements Python 3.x requests library Install the required library: pip...

weebdns

WeebDNS DNS Enumeration Tool with Asynchronicity Do you like C4RR075? ONLY DOWNLOAD IT HERE, DO NOT TRUST OTHER PLACES. This is the official and only repository of the WeebDNS project. Written by: FuzzyRabbit - Twitter: @rabbitfuzzy, GitHub: @FuzzyRabbit DISCLAIMER: This is only for testing...

EDD

CodeFactor EDD Enumerate Domain Data is designed to be similar to PowerView but in .NET. PowerView is essentially the ultimate domain enumeration tool, and we wanted a .NET implementation that we worked on ourselves. This tool was largely put together by viewing implementations of different...

CredCrack

CredCrack ⛔ OBSOLETO. Este repositorio ya no recibe mantenimiento. Considere usar CrackMapExec. Introducción CredCrack es un recolector de credenciales rápido y sigiloso. Exfiltra credenciales de forma recursiva en memoria y en texto claro. Al finalizar, CredCrack analizará y mostrará las...

RTSPbrute

RTSPBrute Inspired by Cameradar Features Find accessible RTSP streams on any target Brute-force stream routes Brute-force credentials Make screenshots on accessible streams Generate user-friendly report of the results: .txt file with each found stream on new line .html file with screenshot of eac...

censys-subdomain-finder

Censys subdomain finder Important note : As of late 2024, Censys does not provide API access to free accounts anymore. This is a tool to enumerate subdomains using the Certificate Transparency logs stored in Censys Search. It should return any subdomain who has ever been issued a SSL certificate ...

opensshenum

Description: Opensshenum is an OpenSsh user enumerator permitting to verify an arbitrary list of user names against an OpenSsh server, to know those actually presents on that remote machine. This program exploits a bug corrected in July 2018 proven to be effective at least starting from OpenSSH...

Security Bulletin:jackson-databind Deserialization Eager DNS Resolution Vulnerability

Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

spycast

SpyCast is a crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets. Building cargo build --release OS specific bundle packages for example dmg and app bundles on OSX can be built via: car...