GETROBARB

GETROBARB XSS Scanner es un framework automatizado de reconocimiento y detección de vulnerabilidades XSS Cross-Site Scripting escrito en Bash, diseñado para auditorías de seguridad web autorizadas. Integra varias utilidades populares del ecosistema de bug bounty y pentesting para automatizar todo...

zenbuster

关于 ZenBuster 是一个由 Zach Griffin 编写的多线程、多平台 URL 枚举工具 （@0xTas）。 我编写这个工具是为了加深对 Python 的熟悉程度，并帮助提升对网络安全工具的整体理解。ZenBuster 可能不是同类工具中速度最快或功能最全面的，但它使用简单、灵活性尚可，实际运行速度仅略慢于像 Gobuster 这样久经考验的工具。个人而言，我一直在用它解决 TryHackMe 等平台上的 CTF 挑战，发现其实现相当可靠。 本软件旨在用于 CTF 挑战，或由安全专业人员在合法授权下收集目标信息： 能够暴力枚举子域名以及 URI 资源（目录/文件）。...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

PortWitness

PortWitness v1.1 Written in Python2 This version of PortWitness has been developed in python2 in which modules like os,subprocess and sys etc have been used.The entire code is based on the concept of socket programming.Using Sockets we establish a connection with a web application to find out if...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

googlesub

Scrape google to hunt subdomain for a user specified target. Repetitive usage might give the script captcha and will thus get less/zero results...

X-Recon

Una utilidad para identificar entradas de páginas web y realizar escaneo XSS. Características: Descubrimiento de subdominios: Obtiene los subdominios relevantes para el sitio web objetivo y los consolida en una lista blanca. Estos subdominios se pueden utilizar durante el proceso de scraping...

iptodomain

iptodomain Descripción: Esta herramienta te permite extraer dominios de un rango de IPs, utilizando la información histórica archivada en Virustotal usando la clave API. Es útil si quieres saber qué dominios están detrás de esta dirección IP, por ejemplo, en programas de bug bounty uno de los...

fprobe

FProbe FProbe - Sonda HTTP rápida Instalación root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Características Toma una lista de dominios/subdominios y prueba si tienen servidores http/https funcionando. Optimiza RAM y CPU en tiempo de ejecución. Soporta puertos especiales...

r3con

R3CON Multifunctional Web Recon & Vulnerability Scanner Tool r3con is a Multifunctional Web Recon & Vulnerability Scanner Tool and incredibly fast crawler that can find multiple vulnerabilitys and gather information. Check for vulnerabilities Reflected XSS Multi-threaded crawling Open-redirection...

vhostawesome

FunWithVhosts 一款旨在高效检查多个IP地址上虚拟主机的工具。 简介 FunWithVhosts 自动识别给定 IP 地址上的虚拟主机。脚本会检查开放端口（尤其是 Web 服务器端口），然后尝试使用指定域名的可能子域名列表来获取内容。它采用线程技术实现高效扫描，并提供详细的结果输出。 特性 使用线程进行并发扫描。 默认检查 80、8080、443、8443 和 4443 端口是否开放。 可自定义端口扫描。 使用字典对目标域名尝试可能的子域名。 输出详细结果，包括状态码和内容长度。 过滤结果以突出显示重要发现。 先决条件 安装 克隆仓库： root@kitploit: git...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

pentest-tools

渗透测试工具集 一套满足快速需求的自定义安全工具集合。 重要说明 ‼ 2022年11月进行了一次大清理 ‼ 一些无用/无法使用的脚本已被归档，另一些则已移至各自独立的仓库以获得更多关注，欢迎查看： apk-analyzer cloudflare-origin-ip csp-analyzer detectify-cves extract-endpoints favicon-hashtrick google-search graphql-introspection-analyzer keyhacks.sh related-domains 安装 root@kitploit: git clone...

rmm

خريطة الاستطلاع الذهنية RMM استلهامًا من ورشة عمل TBHM v4 recon edition by Jason Haddix، طوّرت أداة واجهة سطر أوامر CLI من شأنها تبسيط مهمة تنظيم قائمة من النطاقات والنطاقات الفرعية. الهدف هو إنشاء أداة يمكنها بسهولة توليد هياكل نطاقات معقدة باستخدام برامج الخرائط الذهنية مثل Obsidian Mind Map أو...

react2shell

React2Shell Go-версия React2Shell — это высокопроизводительный сканер уязвимостей, написанный на Go, специально предназначенный для обнаружения уязвимостей удаленного выполнения кода на стороне сервера RCE в приложениях Next.js CVE-2025-55182 и CVE-2025-66478. Этот инструмент улучшает существующи...

CertEagle

CertEagle - Asset monitoring utility using real time CT log feeds Detailed Description about this can be found here : Read Blog here : https://medium.com/@Asm0d3us/weaponizing-live-ct-logs-for-automated-monitoring-of-assets-39c6973177c7 Introduction In Bugbounties “If you are not first , then you...

PCWT

PCWT A web application that makes it easy to run your pentest and bug bounty projects. Description The app provides a convenient web interface for working with various types of files that are used during the pentest, automate port scan and subdomain search. Main page Project settings Domains...

GyoiThon

GyoiThon : Next generation penetration test tool Japanese page is here. Presentation January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU...

ctfr

CTFR Do you miss AXFR technique? This tool allows to get the subdomains from a HTTPS website in a few seconds. How it works? CTFR does not use neither dictionary attack nor brute-force, it just abuses of Certificate Transparency logs. For more information about CT logs, check...

rapiddns

描述 简单的Python模块（非官方），允许您访问rapiddns.io的数据。您也可以将其作为模块使用。 正如rapiddns.io上所述： Rapiddns目前拥有超过30亿条DNS解析数据，支持A、CNAME、AAAA、MX类型。A记录21亿条，CNAME记录2.5亿条，AAAA记录1.03亿条，MX记录5.1亿条。可以查询相同IP网站的域名（支持IPv6）。您还可以查询子域名信息。 安装 root@kitploit: git clone https://github.com/nullt3r/rapiddns cd rapiddns pip3 install...