377 matches found
rengine
reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner ð reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration tool, ability to upload multiple nuclei and gf patterns,...
bugbounty_tools
bugbountytools çšäºæŒæŽèµéå·¥äœæéŽäœ¿çšçèæ¬åå·¥å ·éåãè¿éå°åæŸæäžºäžªäººäœ¿çšèå建çèªåšåèæ¬ïŒå¶å°ä¹äŒå ¬åŒååž èç³»æ¹åŒïŒ åŠæé®é¢ãè¯è®ºæè¯·æ±ïŒè¯·åšæç X 莊å·ïŒäžèŠéè¿ç§ä¿¡ïŒååžïŒæäŒå°œååå€ https://x.com/thedawgyg åœåå·¥å ·ïŒ thcrecon.py - äœ¿çš THC åååæ¥æŸ APIïŒäžºç»å®ç IP/IP èåŽ/æ ¹ååè·ååååçèæ¬ã thclivecheck.py - 䞺 thcrecon.py 讟计çèŸ å©å·¥å ·ïŒå°è·åçæçååå衚并æŸåºè¿äºäž»æºäžçæŽ»è· Web æå¡åšã å³å°æšåºçå·¥å ·ïŒ xsshunter.py -...
recon
O.G. AUTO-RECON ç¹åŸŽ O.G. Auto-Reconã®ç®çã¯ãåææ å ±åéãã§ãŒãºãèªååãããã®çµæã«åºã¥ããŠå¯èœãªéãåæãè¡ãããšã§ãã ãã®ããŒã«ã¯CTFåãã«èšèšãããŠãããããªããã€ãžãŒã§ããïŒæãã¹ãã«ã¹æ§ãéèŠããããŒã«ã§ã¯ãããŸãã...ïŒ ã³ãã³ãæ§æã¯Configèšå®ã§ç°¡åã«å€æŽã§ããŸãã$variableåã¯å€æŽããªãã§ãã ããã Virtual Host Routingãæ€åºãããå ŽåãO.G. Auto-Recon ã¯ãã¹ãåã/etc/hostsãã¡ã€ã«ã«è¿œå ããæ°ãã«çºèŠããããã¹ãåã®åæãç¶è¡ããŸãã DNSåæã¯.com .co .e...
bbot
BEE·bot 㯠Spiderfoot ã«è§Šçºãããå€ç®çã¹ãã£ããŒã§ãããªãã® Recon ããã°ããŠã³ã㣠ãASM ãèªååããããã«äœãããŸãã! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 ãªã¢ã«ã¿ã€ã ã®BBOTã¹ãã£ã³ -VivaGraphJSã«ããå¯èŠå ã€ã³ã¹ããŒã« root@kitploit: stable version pipx install bbot bleeding edge dev branch pipx...
sif
å®è£ · çšæ³ · æš¡å · ææ¡£ · èŽ¡ç® å¿«éãå¹¶åç䟊å¯å°å©çšïŒå šåšäžäžªäºè¿å¶æä»¶äžãæ¯äžªæ«æåšå ±äº«äžäžªè¿æ¥æ± åç HTTP 客æ·ç«¯ã sif æ¯ä»ä¹ïŒ sif æ¯äžäžªäŸŠå¯äžå©ç𿫿åšïŒåšäžäžªäºè¿å¶æä»¶äžå®ææŽäžªéŸè·¯ïŒåååæäžŸãç«¯å£æ«æãç¬è«ãnucleiãæ¡æ¶/CVE æ£æµãJS å¯é¥æåãWeb æŒæŽæ¢æµïŒCORS/XSS/éå®åïŒãäºäžæ¥ç®¡æ£æ¥ã25 ç§ä»¥äžæ«æç±»åïŒäžæ¡åœä»€å®æã root@kitploit: sif -u https://example.com -dnslist -ports -crawl -js -framework -nuclei nuclei å...
discover
root@kitploit: Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux or Ubuntu. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 Jason Ashton @ninewir...
discover
root@kitploit: Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux or Ubuntu. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 Jason Ashton @ninewir...
SPF
SPFïŒSpeedPhish FrameworkïŒã¯ãç°¡åãªãœãŒã·ã£ã«ãšã³ãžãã¢ãªã³ã°ãã£ãã·ã³ã°æŒç¿ã®è¿ éãªåµå¯ãšå±éãå¯èœã«ããããã«èšèšãããPythonããŒã«ã§ãã èŠä»¶: dnspython twisted PhantomJS ã€ã³ã¹ããŒã« root@kitploit: apt-get update apt-get upgrade -y apt-get install git build-essential python-dev python-pip phantomjs -y apt install python3-twisted apt install...
sccmsqlclient
sccmsqlclient äžçšäº SCCM æ°æ®åºæ¢çŽ¢äžå©çšç MSSQL 客æ·ç«¯ã äŸŠå¯æ¥è¯¢ åšå管客æ·ç«¯äžè¿è¡ PowerShell èæ¬ æåæºå¯ å®è£ PIPX root@kitploit: $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP æšå¯ä»¥éè¿å éä»åºå¹¶å®è£ äŸèµé¡¹æ¥å®è£ ã root@kitploit: $ git clone https://github.com/synacktiv/sccmsqlclient $ cd sccmsqlclient $ python3 -m venv...
BugBountyScanner
BugBountyScanner ãã°ããŠã³ãã£ã®åµå¯ãè¡ãããã®Bashã¹ã¯ãªãããšDockerã€ã¡ãŒãžã§ãããããã¬ã¹ã§ã®äœ¿çšãæ³å®ããŠããŸãããªãœãŒã¹æ¶è²»ã¯å°ãªããæ å ±åºåã¯è±å¯ã§ãã ã圹ã«ç«ã¡ãŸãããïŒ BugBountyScanner ã§ããŠã³ãã£ãç²åŸã§ããŸãããïŒ èª¬æ â æ³šæ: ã¹ã¯ãªããã®äœ¿çšã¯VPNçµç±ã§ã®å®è¡ãåŒ·ãæšå¥šããŸãã...
ivre
IVRE IVRE ïŒInstrument de veille sur les réseaux extérieursïŒãŸã㯠DRUNK ïŒDynamic Recon of UNKnown networksïŒã¯ãååçããã³èœåçåµå¯ã®ããã®ããŒã«ãå«ããããã¯ãŒã¯åµå¯ãã¬ãŒã ã¯ãŒã¯ã§ããIVRE ã¯ä»¥äžã®ããŒã¿ã䜿çšã§ããŸãã ååçããŒã«: Zeek Argus Nfdump p0f airodump-ng èœåçããŒã«: Nmap Masscan ZGrab2 ZDNS Nuclei httpx dnsx tlsx Dismap 宣äŒã¹ããŒã¬ã³ã¯æ¬¡ã®ãšããã§ãã ïŒãã©ã³ã¹èªïŒ:...
X-Recon
WebããŒãžã®å ¥åé ç®ãç¹å®ããXSSã¹ãã£ã³ãå®è¡ãããŠãŒãã£ãªãã£ã§ãã æ©èœ: ãµããã¡ã€ã³çºèŠ: 察象ãŠã§ããµã€ãã«é¢é£ãããµããã¡ã€ã³ãååŸãããã¯ã€ããªã¹ãã«ãŸãšããŸãããããã®ãµããã¡ã€ã³ã¯ã¹ã¯ã¬ã€ãã³ã°åŠçäžã«å©çšã§ããŸãã ãµã€ãå šäœã®ãªã³ã¯çºèŠ: æå®ããããã¯ã€ããªã¹ããšmaxdepthã«åºã¥ããŠããŠã§ããµã€ãå šäœã®ãã¹ãŠã®ãªã³ã¯ãåéããŸãã ãã©ãŒã ãšå ¥åã®æœåº: æœåºããããªã³ã¯å ã«ãããã¹ãŠã®ãã©ãŒã ãšå ¥åãç¹å®ããJSONåºåãçæããŸãããã®JSONåºåã¯ãããŒã«ã®XSSã¹ãã£ã³æ©èœã掻çšããããã®åºç€ãšãªããŸãã XSSã¹ãã£ã³:...
SAP_RECON
CVE-2020-6287ãCVE-2020-6286 ç PoCïŒSAP RECON æŒæŽïŒ PffffïŒRECONïŒè¿çšå¯å©çš NetWeaver 代ç ïŒïŒäŒè®¡ä»¬ïŒççåïŒè¿å°±æ¯äœ 们æ³åºçæäœ³ä»£å·ïŒ: æ€èæ¬çšäºæ£æµ SAP LM Configuration Wizard çŒºå°æææ£æ¥çæŒæŽïŒå¹¶äœäžº PoC èæ¬å©çš queryProtocol æ¹æ³äžçç®åœéåã ç®åœéåå è®žä» SAP æå¡åšäžèœœä»»æ zip æä»¶ã æ¬é¡¹ç®ä» çšäºæè²ç®çïŒäžèœçšäºè¿æ³æäžªäººçå©ã 项ç®äœè äžå¯¹å æ¬é¡¹ç®ææé æçä»»äœå¯èœæå®³èŽèŽ£ã åå§åç°ïŒ CVE-2020-6287ïŒPablo Artuso...
claude-bug-bounty
BugHunter AI-powered bug bounty hunting â recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ Powered byAwareXone.com â Your AI Agent Against Scams & Fraud ð Open for Sponsorship BugHunter is open for sponsorship. Your support funds new features...
inter-recon
inter-recon èªåçãªåæã®Webããã³è匱æ§ã®åµå¯ãå®è¡ããã¹ã¯ãªããã ãšã©ãŒçºçæã«ã¯ããã€ãã®ãã§ãã¯ãè¡ããŸãã ããã€ãã®ãã§ãã¯ãã¹ãããããããåéããããäžæããæåŸã®ãã€ã³ãããç¶è¡ãããããããšãå¯èœã§ããïŒããã¯ãVPNã®æéå¶éãªã©ã®ãããã¯ãŒã¯åé¡ãæã çºçããããã§ããïŒ inter-reconã¹ã¯ãªãããbinãã¹ïŒäŸïŒ/usr/bin/ïŒã«ã³ããŒãŸãã¯ãªã³ã¯ãããšãä»»æã®å Žæããã¹ã¯ãªãããå®è¡ã§ããããšã«æ³šæããŠãã ãããåºåã¯å®è¡ããå Žæã«äœæãããŸãã...
oxo
OXO æ«æçŒæåŒæ OXO æ¯äžäžªäžäžºæš¡ååã坿©å±æ§åç®æŽæ§æå»ºçå®å šæ«ææ¡æ¶ã OXO åŒæå°äžçšå·¥å ·ç»åèµ·æ¥ïŒååå·¥äœä»¥åç°æŒæŽå¹¶æ§è¡äŸŠå¯ãæäžŸåæçº¹è¯å«çæäœã ææ¡£ æ¢éååº CLI æå ç€ºäŸ äž»èŠç¹æ§ æš¡ååäžå¯æ©å±æ§ ïŒèœ»æŸç»åå€äžªäžçšæ¢é以æ§è¡å šé¢æ«æã 广æ³çèµäº§æ¯æ ïŒæ«æä» IP å°ååååå°ç§»åšåºçšïŒAndroidãiOSãHarmonyOSïŒä»¥å API æš¡åŒçä»»äœå å®¹ã æ¢éååº ïŒè®¿é®äžæå¢é¿ç瀟åºå宿¹æ¢éåºïŒæ¶µçæµè¡å®å šå·¥å ·ã 坿©å±æ§ ïŒå çœ®æ¯æäœ¿çšç®åçåºäº Python çæ¡æ¶å建åååžèªå·±çæ¢éã...
Conferences
Conferencias Diapositivas de presentación de las conferencias: BlackHat USA 2025 2-7 de agosto Offensivecon 2025 16-17 de mayo Black Hat Asia 2025 1-4 de abril Black hat Europe 2024 9-12 de diciembre Diapositivas de Hexacon 2024 4-5 de octubre Diapositivas de Black Hat USA 2024 3-8 de agosto...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works ⢠Installation ⢠Install with Docker ⢠Usage ⢠MODES ⢠Important Notes | Webhook configurations ⢠For Develope...
gitleaks
Gitleaks root@kitploit: âââââââ â ââ² â â â â â â â â â âââââââ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks...
reconness
ReconNess Webã¢ããªã±ãŒã·ã§ã³ ReconNessãéžã¶çç± ããŠãå€ãã® bugbounty ããã«ãŒã recon ãæŽçããããã«ããã¹ããã¡ã€ã«ã䜿ããåºåããã£ã«ã¿ãªã³ã°ããŠæœåšçã«è匱ãªã¿ãŒã²ããã«éäžã§ããããã«ã倿°ã®bashã¹ã¯ãªãããæžããŠããã®ãèŠãŠããŸãããããããçŸå®çã«ã¯ãããã«ã¯é«åºŠãªbashã¹ãã«ãšãæ··æ²ãšããæèŠãé¿ããããã®åŒ·åºãªãã©ã«ã/ãã¡ã€ã«æ§æããã»ã¹ãå¿ èŠã§ãã ReconNessã¯ããã¹ãŠã® recon...