141 matches found
Venom-JWT
Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...
envocabulary
envocabulary For every variable in your current shell, find the file and line that set it, or which subsystem direnv, launchd, terminal, SSH, system injected it. Plus a few static-file commands for the moment your shell config has sprawled across N files and backups and you've lost the plot. I...
CVE-2025-55182
π β οΈ Unauthorized penetration testing is prohibited Build Steps go get fyne.io/fyne/v2@latest go build -ldflags="-s -w" . Screenshots...
cve-2023-38831
Project Introduction This is a tool written in Go for generating POC for the CVE-2023-38831 vulnerability Affected version: WinRAR 6.23 How to use? Compile go build cve-2023-38831.go Usage cve-2023-38831.exe 1234.jpg payload.cmd poc.zip Here, 1234.jpg can be the result of any file modification. I...
useragent
useragent A comprehensive and categorized collection of User Agents. Installation Instructions To install the useragent tool, use the following command: go install -v github.com/projectdiscovery/useragent/cmd/ua@latest Usage To display help for the tool, use the following command: ua -h This will...
tldfinder
TLDFinder Features β’ Installation β’ Usage β’ Running tldfinder β’ Join Discord A streamlined tool for discovering private TLDs for security research. Features TLD based DNS lookups Passive TLD based DNS lookups Active STD IN/OUT and TXT/JSON output Installation tldfinder requires Go 1.21 to install...
dexfinder
dexfinder English | δΈζ | Website Website : junelegency.github.io/dexfinder Cross-platform APK/DEX method & field reference finder with call chain tracing, ProGuard/R8 deobfuscation, and Android hidden API detection. Inspired by Android's veridex tool, reimplemented in Go with enhanced capabilitie...
gocropalypse
gocropalypse CVE-2023-21036 detection in Go All credit to Simon Aarons and David Buchanan and infobyte How to use Go version 1. go run gocropalypse.go /path/to/dir How to use Python version 1. python3 acropalypsedir.py /path/to/dir...
godirb
godirb Fast, modern directory, file, port and FUZZ brute-forcer written in Go. Built for quick scans where you want a modern dirb-like tool: run it, get useful results, tune the obvious flags, and avoid dragging a full fuzzing framework into a simple job. π¦ Installation Go go install...
getsubdomain
getsubdomain Get subdomain list and check whether they are active or not by each response code. Using API by c99.nl Installation βΆ go install github.com/abaykan/getsubdomain@latest Put your APIKEY in /.config/c99.txt: βΆ echo "" /.config/c99.txt Usage Single Domain βΆ echo "kustirama.id" |...
cowitness
CoWitness CoWitness is a tool designed to function as an HTTP, HTTPS, and DNS server. It allows you to serve web pages, log HTTP requests, and customize DNS responses. This README provides an overview of the features and instructions on how to compile and use the CoWitness tool. Features HTTP...
jsecret
jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...
Pulsar
Pulsar Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets π...
goldig
Project moved to github.com/rtfmkiesel/goldig goldig Execute commands on Windows via DNS records. This utility will create a DNS server and serve a malicious TXT record. Just copy & paste the command from the console output into your Windows shell. Usage usage: goldig OPTIONS Options: -i Interfac...
cirrusgo
CirrusGo A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful next version Note flag -o output not working install : golang 1.18Ver go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest Help...
FollinaScanner
FollinaScanner A tool written in Go that scans files & directories for the Follina exploit CVE-2022-30190 Note: "Suspicious files" means files that have a URL in them but isn't working Compiling git clone https://github.com/ErrorNoInternet/FollinaScanner cd FollinaScanner go build Usage Scan the...
mkpath
mkpath Make URL path combinations using a wordlist Read a wordlist file and generate path combinations for given domain or list of domains. Input from wordlist file is lowercased and unique words are processed. Additionally, wordlist can be filtered using regex. When you use mkpath's -l parameter...
Barcha
π Barcha Barcha is your SwissβArmy knife for SQL Injection reconnaissance π. Written in Go, it automates: Shodan enumeration of SSL hosts π΅οΈββοΈ Liveness & redirect checks ignores bad certs π Automated Ghauri tests for each host π‘οΈ SQLite logging of every scan π π Features π‘ Shodan Dork :...
melody
Melody Monitor the Internet's background noise Melody is a transparent internet sensor built for threat intelligence and supported by a detection rule framework which allows you to tag packets of interest for further analysis and threat monitoring. Table of Contents Melody Table of contents...