attack-surface-framework

Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...

scapy

Scapy Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to...

airgorah

Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...

UltraViolet

UltraViolet Self-hosted network discovery & search — your own Shodan, on your hardware. TCP/UDP scanning · 100 protocol probes · TLS/JARM fingerprints · CVE matching · full-text search · delta tracking · alerts Quick start · Features · Architecture · Documentation · Production Important. Scan onl...

python-pentesting

Python for Pentesters Overview Getting started with Python for pentesting and red team engagements is fairly easy! This repo is just a small collection of random scripts to help get you started. Brought to you by: Examples: by Mike Felch @ustayready and Joff Thyer @joffthyer This code is provided...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

LetsMapYourNetwork

Omniscient - Let’s Map Your Network v2.0 Table of Contents 1. WHAT IT IS 2. WHY IT IS 3. WHERE TO USE IT 4. Presentations 5. Key Features 6. Installation Guidelines 7. HOW TO USE IT 8. Understand Node 9. Contributer 10. LMYN In Action 11. Roadmap 12. Contact Information WHAT IT IS It is utmost...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

metabigor

Metabigor - APIキーの手間なしで手に入るOSINTパワー Metabigorとは？ Metabigor は、1つもAPIキーを登録する必要なく、ターゲットのインフラストラクチャをマッピングします。 ネットワークレンジ、証明書、関連ドメイン、露出したポート、CDNベンダー、コードリークなど、すべてを 無料のソースから取得でき、すべてパイプで相互に接続できます。 機能 ネットワークディスカバリ - ASN、組織、ドメイン、またはIPからIPレンジ（CIDR）を検索 証明書透過性（Certificate Transparency） - crt.sh 経由でサブドメインを発見...

RedRabbit

RedRabbit About RedRabbit is a PowerShell script aimed at helping pentesters conduct ethical hacking RedTeam. The aim is to highlight just how Powerful PowerShell is and how it can be used against you Ethically. To Run You can either run locally by downloading the script or run remotely using:...

trackerjacker

trackerjacker 接続していないWi-Fiネットワークをマッピングするためのnmapのようなツールです。生の802.11モニタリングを通じて、Wi-Fiネットワークとデバイスをマッピングおよび追跡します。 PyPIページ: https://pypi.python.org/pypi/trackerjacker インストール pip3 install trackerjacker サポートプラットフォーム : Linux（Ubuntu、Kali、RPiでテスト済み）およびmacOS（プレアルファ版） trackerjackerは以下のような用途に役立ちます:...

netmap.js

netmap.js ブラウザベースの高速ネットワーク発見モジュール このプロジェクトはメンテナンスされなくなりました。 説明 netmap.js は、ブラウザベースのホスト発見とポートスキャン機能を提供し、ウェブサイト訪問者のネットワークをマッピングできるようにします。 es6-promise-pool を利用して、ブラウザが許可する最大数の同時接続を効率的に実行するため、非常に高速です。 動機 私は取り組んでいるアイデアのためにブラウザベースのポートスキャナーが必要でした。既存のモジュールをインポートするか、BeEF...

w12scan-client

w12scan-client 网络资产搜索发现引擎,大规模资产识别，毕业设计，w12scan 客户端程序 设计思想 client的思想是接收到哪些数据url,ip就只会跑这些，不会根据url 301自动跳转走，也不会根据url来扫描ip。这些事情是需要在添加目标到client之前做的，例如添加http://url 以及 https://url 以及对应的ip，这样w12scan会根据相关内容进行聚合分析。 配置说明...

CVE-2026-20169

IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...

CVE-2026-100289

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

CVE-2026-100289

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

EUVD-2026-89026

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

CVE-2026-100289

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

CVE-2026-100289

Devolutions Server version 2026.3.5.0 and earlier versions are affected by a missing authorization vulnerability in the gateway network scan token API . An authenticated low-privileged user can exploit this by sending a crafted API request to generate a network scan token. This allows the attacke...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...