23 matches found
MANSPIDER
MANSPIDER Rastrea recursos compartidos SMB en busca de informaciΓ³n jugosa. Β‘Se admite bΓΊsqueda de contenido de archivos + expresiones regulares! Novedades en v2.0 Β‘Manspider 2.0 ha llegado! Esto trae mejoras significativas: ExtracciΓ³n de texto nueva y mejorada impulsada por Kreuzberg - ahora...
CloudScraper
CloudScraper es una herramienta para rastrear y extraer objetivos en busca de recursos en la nube. Introduce una URL y rastrearΓ‘ y buscarΓ‘ en el cΓ³digo fuente de las pΓ‘ginas rastreadas cadenas como 's3.amazonaws.com', 'windows.net' y 'digitaloceanspaces'. Actualmente se admiten recursos de AWS,...
LHF
Codacy Badge Esto solo ha sido probado en la distribuciΓ³n mΓ‘s nueva de Kali Linux LHF: Low Hanging Fruit una herramienta de reconocimiento para pruebas de penetraciΓ³n Para instalar dependencias: ./Install.sh Para iniciar: ./LHF.py + Checking permissions - Rockyou wordlist is missing trying to...
Jeeves
Jeeves Uso β’ InstalaciΓ³n Jeeves estΓ‘ hecho para buscar Inyecciones SQL Ciegas Basadas en Tiempo durante el reconocimiento. Contenido: InstalaciΓ³n Uso Agregar Cabeceras Usar Proxy Hacer PeticiΓ³n POST MΓΊltiples formas de uso - InstalaciΓ³n y Requisitos: Instalando Jeeves π $ go install...
CertCrunchy
/ \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ Solo una herramienta de reconocimiento tonta que usa datos de certificados SSL para encontrar nombres de host potenciales ΒΏQuΓ© es...
s3dns
S3DNS s3dns es un servidor DNS ligero que ayuda a descubrir buckets de almacenamiento en la nube AWS S3, Google Cloud Storage y Azure Blob resolviendo solicitudes DNS, rastreando CNAMEs y coincidiendo con patrones conocidos de URLs de buckets. Es un compaΓ±ero ΓΊtil para pentesters , cazadores de...
Spartan
Spartan Reconocimiento como un profesional Wiki β’ Uso β’ GalerΓa CaracterΓsticas Escaneo de subdominios usando Aquatone y Sublist3r Httprob solo para sitios activos Masscan para puertos abiertos Identificar CMS usando CMSeeK Obtener URLs de Wayback Machine Captura de pantalla usando Aquatone Fuerz...
urlhunter
o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...
domain-enumeration-sicarius
Sicarius π΄ β‘οΈ Fast subdomain enumeration tool π΄ β‘οΈ π¦ @unp4ck πͺ³π« Install git clone github.com/unp4ck/sicarius.git cd sicarius touch config/config.yaml add your apis keys here! pip3 install -r requirements.txt --user Post Installation API Key is needed before querying on third-party sites; Sicarius...
spaces-finder
Spaces finder Spaces finder is a tool to quickly enumerate DigitalOcean Spaces to look for loot. It's similar to a subdomain bruteforcer but is made specifically for DigitalOcean Spaces and also has some extra features that allow you to grep for delicious files as well as download interesting fil...
AlienTec-Recon-Tool
AlienTec π½ Recon-Tool β€οΈ Your Support Makes a Difference Thanks for using the AlienTec Recon-Tool! This is a passion project and will always be available as a free, open-source version. Your support helps accelerate the development of the planned Pro version and keeps this free tool maintained. If...
cve-2024-24919
Recon Tool Installation 1. git clone https://github.com/satchhacker/cve-2024-24919.git 2. cd cve-2024-24919 3. chmod +x cve-2024-24919.sh 4. ln -s $pwd/cve-2024-24919.sh /usr/bin/cve-2024-24919.sh To use the tool, simply run: cve-2024-24919 Usage This tool will make a curl request to the ip/domai...
CVE-2026-92570: Missing Authorization
reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...
s3dns v0.2.28
S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...
Exploit for Path Traversal in Igniterealtime Openfire
!Burp Suitehttps://img.shields.io/badge/Burp%20Suite-Pro%20E...
gimmePATz - GitHub Personal Access Token (PAT) Recon Tool 1.0.0
gimmePatz is a recon tool for GitHub PATs. Designed for bug bounty hunters, pentesters and red teams. gimmePatz will tell you what scopes a PAT has, and it will tell you what repositories or GitHub Organizations the PAT is attached to as well...
3klCon - Automation Recon Tool Which Works With Large And Medium Scope
Full Automation Recon tool which works with Small and Medium scopes. ΩIt's recommended to use it on VPS, it'll discover secrets and searching for vulnerabilities So, Welcome and let's deep into it 3 Updates Version 1.1, what's new? Very Recommended 1. Fixing multiple issues with the used tools. 2...
Exploit for Improper Input Validation in Microsoft
Weaponized CVE-2019-0604 Automated Exploit Tool to Maximize C...
Autoenum - Automatic Service Enumeration Script
Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...
MSOLSpray - A Password Spraying Tool For Microsoft Online Accounts (Azure/O365)
A password spraying tool for Microsoft Online accounts Azure/O365. The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS! Why...