s3enum

s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation go install github.com/koenrh/s3enum@latest Usage You nee...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: $ printf example.com | gau $ cat domains.tx...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr, ip range or...

f5_scanner

f5scanner F5 mass scanner and CVE-2020-5902 checker This tool is mass scanner with 30 threads hardcoded use with caution How to setup $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt How to run Single IP python3 f5scanner.py --ip 192.168.1.1 CIDR...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

CWFF

CWFF - Custom wordlists for fuzzing CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage CWFF -h --threads --gith...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

httpx

Features • Installation • Usage • Documentation • Notes • Join Discord httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. It is designed to maintain result reliability with an increased number of threads. Features Simple and modular...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

CVE-2024-4956

CVE-2024-4956 Toda la información se proporciona solo con fines informativos. python3 CVE-2024-4956-threads.py - targetstextfile - outputtextfile nuclei -t nucleiactive.yaml -l targets.txt nuclei -t nucleipassive.yaml -l targets.txt -json-export output.json; then parse in any way targets.txt form...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

Fiber

描述 纤程（Fiber）是一种执行单元，必须由应用程序手动调度，而不是依赖 Windows 内置的基于优先级的调度机制。纤程通常被称为轻量级线程。有关纤程概念及工作机制的更多详细信息，请查阅官方文档。 纤程允许在单个线程内部拥有多个执行流，每个执行流拥有自己的寄存器状态和栈。另一方面，纤程对内核是不可见 的，这使得它们比创建新线程更隐蔽（也更廉价）地执行内存代码。 一个线程可以创建多个纤程，并通过调用 SwitchToFiber 函数随意切换。在此之前，当前线程本身必须先通过调用 ConvertThreadToFiber...

http-mcp-bridge

HTTP MCP Bridge Este proyecto implementa un servidor HTTP que actúa como puente entre peticiones HTTP/1.1 y un servidor MCP remoto, utilizando la librería mcp de Python GitHub. El propósito principal de esta iniciativa es poder utilizar herramientas de seguridad HTTP para probar servidores MCP...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...

CallStackMasker

CallStackMasker Este repositorio demuestra una técnica de prueba de concepto PoC para suplantar dinámicamente pilas de llamadas mediante temporizadores. Antes de que nuestro implante entre en suspensión, podemos poner en cola temporizadores para sobrescribir su pila de llamadas con una falsa y...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

Hunt-Weird-ImageLoads

Hunt-Weird-ImageLoads Este proyecto fue creado para jugar con diferentes IOCs causados por eventos ImageLoad. Aprovecha ETW para monitorear eventos ImageLoad y recorre el callstack para identificar algunos posibles IOCs, tales como: Página RWX en el callstack Módulo stomped en el callstack Module...

Q-DDOS-GUI

Q-DDOS-GUI DDOS WRITTEN IN C TCP/HTTP/HTTPS ddos written in c . Attack on tcp, http and https protocol. Attack with ddos choosing a random TIMEOUT between a range of seconds or with a defined Timeout. Select the number of threads you want to use. check the stop all box to stop all threads and...