tldfinder

TLDFinder Features • Installation • Usage • Running tldfinder • Join Discord A streamlined tool for discovering private TLDs for security research. Features TLD based DNS lookups Passive TLD based DNS lookups Active STD IN/OUT and TXT/JSON output Installation tldfinder requires Go 1.21 to install...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

snitch

snitch a friendlier ss / netstat for humans. inspect network connections with a clean tui or styled tables. install homebrew brew install snitch thanks to @bevanjkay for adding snitch to homebrew-core go go install github.com/karol-broda/snitch@latest nixpkgs nix-env -iA nixpkgs.snitch thanks to...

CVE-2025-55182-PoC

React2Shell CVE-2025-55182 PoC Usage Interactive shell ./react2shell -u http://target:3000 Single command ./react2shell -u http://target:3000 -c "id" WAF bypass 128KB junk data ./react2shell -u http://target:3000 -waf 128 Build go build -o react2shell . Options Flag| Description ---|--- -u| Targe...

CVE-2025-55182

🔔 ⚠️ Unauthorized penetration testing is prohibited Build Steps go get fyne.io/fyne/v2@latest go build -ldflags="-s -w" . Screenshots...

S3-from-csp

S3-from-csp Extracts all S3 Buckets from CSP report headers and then tests for file upload vulns Install go install github.com/RandomRobbieBF/S3-from-csp@latest Run s3fromcsp file.txt...

awsScrape

AWSScrape AWSScrape is a tool designed to scrape SSL certificates from all AWS IP ranges, searching for specific keywords in the certificates' Common Name CN, Organization O, and Organizational Unit OU fields. Installation 1. Clone this repository: git clone https://github.com/jhaddix/awsscrape.g...

poc-cve-2024-23897

poc-cve-2024-23897 this code is my attempt to write a proof of concept under cve 2024 23897. allows you to perform RCE on the attacked machine through the vulnerable args4j module how to use: go run poc.go http://127.0.0.1:8888/ /etc/passwd...

github-endpoints

github-endpoints Find endpoints on GitHub. Description This Go tool performs searches on GitHub and parses the results to find endpoints of a given domain. Install go install github.com/gwen001/github-endpoints@latest or git clone https://github.com/gwen001/github-endpoints cd github-endpoints go...

aws-enumerator

AWS Service Enumeration Disclaimer The tool is in beta stage testing in progress, no destructive API Calls used read only actions . I hope, there will be no issues with the tool. If any issues encountered, please submit the ticket. Description The AWS Enumerator was created for service enumeratio...

jsecret

jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...

subjs

subjs subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more. It's recommended to pair this with gau and then https://github.com/GerbenJavado/LinkFinder Resources Usage Installation Usage: Examples: ...

vuln-list-update

vuln-list-update Collect vulnerability information and save it in parsable format automatically Data https://github.com/aquasecurity/vuln-list/ Usage $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval, debian, ubuntu,...

Eris

Eris Eris is a desktop PGP workstation written in Go with Fyne. It stores keys in an encrypted vault and gives you a clean UI for signing, encryption, decryption, and verification. Features...

cdncheck

cdncheck Features • Installation • Usage • Join Discord cdncheck is a tool for identifying the technology associated with dns / ip network addresses. Features CDN , CLOUD and WAF Detection Easy to use as library Easily extendable providers IP, DNS input support Text, JSONL output Filters on outpu...

smogcloud

☁️ Smogcloud Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic...

nali

Nali An offline tool for querying IP geographic information and CDN provider. 中文文档 Feature Multi database support Chunzhen qqip database ZX ipv6 database Geoip2 city database IPIP free database ip2region database DB-IP database IP2Location DB3 LITE database CDN provider query Pipeline support...

FollinaScanner

FollinaScanner A tool written in Go that scans files & directories for the Follina exploit CVE-2022-30190 Note: "Suspicious files" means files that have a URL in them but isn't working Compiling git clone https://github.com/ErrorNoInternet/FollinaScanner cd FollinaScanner go build Usage Scan the...

useragent

useragent A comprehensive and categorized collection of User Agents. Installation Instructions To install the useragent tool, use the following command: go install -v github.com/projectdiscovery/useragent/cmd/ua@latest Usage To display help for the tool, use the following command: ua -h This will...

vet

Find malicious packages, vulnerabilities and risky CI workflows before they reach production. Install • Docs • Commands • Policy • Discord !NOTE This branch is vet v2, in alpha. vet v1 is on main and stays the latest release. The v2.0.0 release notes map each v1 command and flag to v2. Why vet Yo...