wosind

Readme for "wosind.py" This software is licensed under GPLGNU GPLv3. This tool combines a lot of possibilties of OpenSource Intelligence. The tool uses local shell commands, like ping, host ... and external resources as nmap or external webservices. 1. System prerequisites MacOS oder Linux window...

Reconnoitre

A reconnaissance tool made for the OSCP labs to automate information gathering and service enumeration whilst creating a directory structure to store results, findings and exploits used for each host, recommended commands to execute and directory structures for storing loot and flags. Contributio...

what-wordpress

what-wordpress Tool to extract all themes and plugins that are shown on the front page of a wordpress site...

magicRecon

MagicRecon: Fast, simple and effective MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats. With Magic Recon you...

bluing

Bluing An intelligence gathering tool for hacking Bluetooth English · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing formerly bluescan is a Blu etooth In telligence G athering tool written primarily in Python. It can help us snoop on the...

oORecon

oORecon — Attack Surface Discovery TUI oORecon is an open-source Python terminal UI for web reconnaissance and attack surface discovery. It helps bug bounty hunters , penetration testers , and OSINT researchers map a domain quickly: DNS recon , subdomain enumeration , port scanning , reverse IP...

Argus

A Python-based toolkit for Information Gathering & Reconnaissance About The Project Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and reconnaissance. It brings together a clean, intuitive interface and a wide range of reliable modules,...

KittyStager

KittyStager KittyStager is a stage 0 C2 comprising an API, client, and malware. The API is responsible for delivering basic tasks and shellcode to be injected into memory by the malware. The client also connects to the API and allows for interaction with the malware by creating tasks. The goal of...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you...

SharpView

SharpView .NET port of PowerView Usage: C:\SharpView.exe Get-DomainController -Domain test.local -Server dc.test.local -Credential [email protected]/password C:\SharpView.exe Get-DomainController -Help Get-DomainController -Domain -Server -DomainController -LDAP -Credential Available methods...

InfoHound

InfoHound - OSINT tool for domain profiling During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization. InfoHound performs passive analysis techniques which do not...

CamXploit

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CamXploit is a security reconnaissance tool designed to help researchers and defenders assess whether an IP address is hosting a potentially exposed IP camera or CCTV service. The tool performs non-intrusive checks such as...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: https://www.example.com/product/123 https://www.example.com/product/456...

jsubfinder

JSubFinder is a tool writtin in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go's amazing performance allowing it to utilize large data sets & be easily chained with other tools...

inter-recon

inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of errors. There is a possibility to skip some checks, to restart them and/or to continue with the last point you stopped. This is because sometimes there are network issues like time limit on...

AtlasReaper

AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...

Bluto

BLUTO DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Enumeration | MetaData Harvesting Author: Darryl Lane | Twitter: @darryllane101 https://github.com/darryllane/Bluto Like Bluto? Give...

003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...

ghostrecon

Cloud-Based, Fast, and Customizable Web Recon Tool. Prerequisites NodeJs Python3 Go pip3 npm Screen Shots 📸 : Screen Shot 1 Screen Shot 2 Steps to install for Linux & Mac🐧 👨🏽‍💻: !ubuntuhttps://ass...

custom-oscp-tooling

Custom OSCP Tooling A consolidated set of read-only, OSCP-exam-safe custom tools by Samson Laird. Everything here enumerates, identifies, and advises. Nothing here exploits, sprays, or modifies a target. The problem this solves OSCP exam and lab work is a list of disconnected one-liners: nmap her...