waldo

Waldo is a lightweight and multithreaded directory and subdomain bruteforcer implemented in Python. It can be used to locate hidden web resources and undiscovered subdomains of the specified target. Key Features Quickly and easily generate a list of all subdomains of target domain Discover hidden...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you...

LACheck

LACheck Multithreaded C .NET Assembly Local Administrative Privilege Enumeration Arguments ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Usage: LACheck.exe smb rpc /targets:hostname,fqdn.domain.tld,10.10.10.10...

ropr

ropr ropr is a blazing fast multithreaded ROP Gadget finder What is a ROP Gadget? ROP Return Oriented Programming Gadgets are small snippets of a few assembly instructions typically ending in a ret instruction which already exist as executable code within each binary or library. These gadgets may...

ApacheTomcatScanner

A python script to scan for Apache Tomcat server vulnerabilities. Features Multithreaded workers to search for Apache tomcat servers. Multiple target sources accepted: Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets. Reading targets line b...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. git clone https://github.com/maurosoria/dirsearch.git...

paradoxiaRAT

Paradoxia Remote Access Tool. Are you looking for a GUI alternative? Check outRemote Hacker Probe. More Advanced and Stable with ton of features. Features Paradoxia Console Feature| Description ---|--- Easy to use| Paradoxia is extremely easy to use, So far the easiest rat! Root Shell| - Automati...

swaggerHole

A python3 script searching for secret on swaggerhub Introduction • Requirements • Installation • Usage • Output explanation • Thanks Created by Liodeus Introduction This tool is made to automate the process of retrieving secrets in the public APIs on swaggerHub. This tool is multithreaded and pip...

Egyscan

EgyScan V3.4 "Ultra" : Your Digital Fort of Invincibility 🏰 Greetings, Guardians of the Digital Realm! 🛡️ Prepare to embark on an extraordinary journey with EgyScan V3.0 , the ultimate sentinel that transforms your websites into impregnable fortresses against relentless cyber threats. Let's explor...

citrixmash_scanner

CVE-2019-19781 citrixmash scanner A multithreaded scanner for Citrix appliances that are vulnerable to CVE-2019-19781. The scanner does not attempt to compromise/exploit hosts and avoids downloading any sensitive content. A HEAD request is used to determine if a target is vulnerable. False...

Dosinator

DoSinator DoSinator is a powerful Denial of Service DoS testing tool developed in Python. Designed for security professionals and researchers, this tool allows them to simulate various DoS attacks, providing a realistic environment for assessing the resilience of networks, systems, and applicatio...

log4jcheck

Log4j CVE-2021-44228 검사기 멀티스레드 방식으로 URL 목록을 POST 및 GET 요청과 파라미터 조합으로 검사합니다. NortwaveSecurity 버전에서 많은 영감을 받았습니다. 설정 확인할 URL 확인할 URL 목록은 다음 형식csv이어야 합니다: description,URL,method,parameters production,example.com/login,POST,"username,password" staging,example.com/search,GET,"q"...

heartbleed-masstest

이 도구는 효율적인 멀티스레딩 방식으로 여러 호스트에서 Heartbleed 취약점을 스캔할 수 있게 해줍니다. 이 도구는 서버를 악용하지 않고 Heartbleed에 취약한 OpenSSL 버전을 테스트합니다. 따라서 하트비트 요청으로 인해 서버가 메모리에서 데이터를 유출하거나 무단으로 데이터를 노출하지 않습니다. 이 Mozilla 블로그 게시물에 사용된 방법이 설명되어 있습니다. 사용법: ssltest.py network2 network3 ... 여러 도메인에서 SSL 하트블리드 취약점CVE-2014-0160 테스트 옵션: -h...

dnsenum

README - dnsenum.pl 버전: 1.2.4 멀티스레드 Perl 스크립트로, 도메인의 DNS 정보를 열거하고 비연속적인 IP 블록을 발견합니다. 작업: 1 호스트 주소 획득 A 레코드. 2 네임서버 획득 스레드 처리. 3 MX 레코드 획득 스레드 처리. 4 네임서버에 axfr 쿼리 수행 및 BIND 버전 획득 스레드 처리. 5 Google 스크래핑을 통해 추가 이름 및 서브도메인 획득 Google 쿼리 = "allinurl: -www site:domain". 6 파일로부터 서브도메인 무차별 대입, NS 레코드가 있는...

dnsenum

README - dnsenum.pl VERSION: 1.2.4 multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. OPERATIONS: 1 Get the host's addresse A record. 2 Get the namservers threaded. 3 Get the MX record threaded. 4 Perform axfr queries on nameservers and ge...

cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly compiler since it us...

OAMBuster

OAMBuster Oracle OAMCVE-2018-2879에 대한 멀티스레드 패딩 오라클 공격 저자 Red Timmy Marco Ortisi, Stefan Broeder, Ahmad Mahfouz 설명 이 멀티스레드 익스플로잇은 단일 스레드 버전에 비해 공격 속도를 크게 향상시키기 위해 개발되었습니다. 공격의 기술적 세부 사항에 대한 자세한 내용은 SEC Consult의 블로그 게시물을 참조하십시오:...

Freak-Scanner

Freak-Scanner CVE-2015-0204에 취약한 SSL EXP Cipher를 탐지하는 데 사용되는 멀티스레드 Python FREAK 스캐너입니다. 속도가 꽤 빠르며, 한 시간에 약 1,000개 호스트를 스캔할 수 있습니다. 다만 출력이 지저분하므로 Vulnerable/NotVulnerable을 기준으로 grep해야 합니다. 수요가 있다면 나중에 정리하도록 하겠습니다...

SQLbit

SQL Blind Injection Tool A tool for blind SQL injections that uses multithreaded bitwise comparisons to find values of cells in SQL-tables. Works with SQLite at least and supports cookies. It's able to: Search cell values by columns in a table Search characters count in a cells by columns in a...

SharpShares

SharpShares Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbo...