tracy

Tracy A pentesting tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner. tracy should be used during the mapping-the-application phase of the pentest to identify sources of input and their corresponding outputs. tracy can...

Registry-Recon

Registry-Recon Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon. Author: Jess Hires Description As a red-team practitioner, we are often using tools that attempt to fingerprint details about a compromised system, preferably in the most stealthy way possible. Some of our usual...

ReconNote

ReconNote Marco de Automatización de Reconocimiento de Seguridad para Aplicaciones Web Toma la entrada del usuario como un nombre de dominio y maximiza la superficie de ataque listando los activos del dominio como: Subdominios de - Amass, findomain, subfinder y subdominios resolubles usando...

Bountystrike-sh

Bountystrike-sh Bountystrike-sh is a collection of bash and python scripts that installs common bug bounty tools, performs recon scans and continous asset discovery. Bountystrike-sh is opensource but belongs to the BountyStrike project, self-hosted bug bounty management system. root@kitploit: | \...

tookie-osint

Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma...

SPF

SPF SpeedPhish Framework is a python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises. Requirements: dnspython twisted PhantomJS Installation root@kitploit: apt-get update apt-get upgrade -y apt-get install git build-essential python-dev...

MANSPIDER

MANSPIDER Rastrea recursos compartidos SMB en busca de información jugosa. ¡Se admite búsqueda de contenido de archivos + expresiones regulares! Novedades en v2.0 ¡Manspider 2.0 ha llegado! Esto trae mejoras significativas: Extracción de texto nueva y mejorada impulsada por Kreuzberg - ahora...

geo-recon

Geo-Recon Una herramienta CLI de OSINT diseñada para agilizar la consulta de reputación IP y geolocalización para analistas de seguridad. Prerrequisitos para Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip Si no usas Debian o Ubuntu, busca en sus respectivas...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

osint-scraper

Social Recon This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your own online presence, summarize the digital footprint of someone you know, or uncover the person behind a specific username. Getting Starte...

ReconAIzer

ReconAIzer ReconAIzer es una poderosa extensión Jython para Burp Suite que aprovecha OpenAI para ayudar a los cazadores de recompensas por errores a optimizar su proceso de reconocimiento. Esta extensión automatiza varias tareas, facilitando y acelerando la identificación y explotación de...

CloudScraper

CloudScraper es una herramienta para rastrear y extraer objetivos en busca de recursos en la nube. Introduce una URL y rastreará y buscará en el código fuente de las páginas rastreadas cadenas como 's3.amazonaws.com', 'windows.net' y 'digitaloceanspaces'. Actualmente se admiten recursos de AWS,...

ivre

IVRE IVRE Instrument de veille sur les réseaux extérieurs o DRUNK Dynamic Recon of UNKnown networks es un framework de reconocimiento de redes, que incluye herramientas para reconocimiento pasivo y activo. IVRE puede usar datos de: Herramientas pasivas: Zeek Argus Nfdump p0f airodump-ng...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain e...

T3MP3ST

🌩️ T3MP3ST 🌩️ root@kitploit: ▄▄▄█████▓▓█████ ███▄ ▄███▓ ██▓███ ▓█████ ██████ ▄▄▄█████▓ ▓ ██▒ ▓▒▓█ ▀ ▓██▒▀█▀ ██▒▓██░ ██▒▓█ ▀ ▒██ ▒ ▓ ██▒ ▓▒ ▒ ▓██░ ▒░▒███ ▓██ ▓██░▓██░ ██▓▒▒███ ░ ▓██▄ ▒ ▓██░ ▒░ ░ ▓██▓ ░ ▒▓█ ▄ ▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒ ██▒░ ▓██▓ ░ ▒██▒ ░ ░▒████▒▒██▒ ░██▒▒██▒ ░ ░░▒████▒▒██████▒▒ ▒██▒ ░...

bbot

BEE·bot è uno scanner multiuso ispirato a Spiderfoot, progettato per automatizzare le tue Recon , Bug Bounty e ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 Una scansione BBOT in tempo reale - visualizzazione conVivaGraphJS Installazione...

discover

root@kitploit: Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux or Ubuntu. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 Jason Ashton @ninewir...

discover

root@kitploit: Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux or Ubuntu. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 Jason Ashton @ninewir...

Shadowbroker

🛰️ S H A D O W B R O K E R Intercettazione Globale delle Minacce — Piattaforma di Intelligenza Geospaziale in Tempo Reale ShadowBroker ShadowBroker è una piattaforma di intelligence decentralizzata che aggrega telemetria OSINT multi-dominio in tempo reale da oltre 60 feed di intelligence live in...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...