ReconHound

ReconHound ReconHound è uno strumento di ricognizione web basato su Python, progettato per penetration tester, bug bounty hunters e hacker etici. Aiuta a identificare percorsi nascosti, file, sottodomini, parametri di query, host virtuali ed endpoint fuzzabili — rendendolo una soluzione versatile...

angryFuzzer

AngryFuzz3r Status: Entwicklung Über das AngryFuzz3r-Projekt AngryFuzz3r ist eine Sammlung von Tools für Pentesting, um Informationen zu sammeln und Schwachstellen der Ziele basierend auf dem Fuzzedb-Projekt https://github.com/fuzzdb-project/fuzzdb zu entdecken. UrlFuzz3r-AngryFuzz3r1 Entdecken S...

Oralyzer

Introduzione Oralyzer è un semplice script Python che individua vulnerabilità di Open Redirection in un sito web. Lo fa eseguendo un fuzzing sull'URL fornito in input. Caratteristiche Oralyzer è in grado di identificare i seguenti tipi di vulnerabilità di Open Redirect: Basate su Header Basate su...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

fuzzuli

fuzzuli Motivazione • Contesto • Installazione • Utilizzo • Esecuzione di fuzzuli • Pagina dello strumento fuzzuli è uno strumento di fuzzing degli URL che mira a trovare file di backup critici creando una wordlist dinamica basata sul dominio. Motivazione...

Scannerweb

Scannerweb Scanner di vulnerabilità scritto in python3, effettua fuzzing su tutti gli URL del sito target e poi li scansiona per Scannerweb Screeenshot Naviga nella directory /opt opzionale root@kitploit: cd /opt/ Clona questo repository root@kitploit: git clone...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

HawkScan - Security Tool For Reconnaissance And Information Gathering On A Website

Security Tool for Reconnaissance and Information Gathering on a website. python 2.x & 3.x This script use "WafW00f" to detect the WAF in the first step https://github.com/EnableSecurity/wafw00f This script use "Sublist3r" to scan subdomains https://github.com/aboul3la/Sublist3r This script use...

Reconnaissance and Vulnerability Scanning Tool: Raccoon

Raccoon is a tool made for reconnaissance and information gathering with an emphasis on simplicity. It will do everything from fetching DNS records, retrieving WHOIS information, obtaining TLS data, detecting WAF presence and up to threaded dir busting and subdomain enumeration. Every scan output...

digit_sum

This plugin tries to find new URLs by changing the numbers that are present on it. Two configurable parameters exist: fuzzImages maxDigitSections An example will clarify what this plugin does, lets suppose that the input for this plugin is: http://host.tld/index1.asp This plugin will request:...

url_fuzzer

This plugin will try to find new URLs based on the input. If the input is for example: http://a/a.html The plugin will request: http://a/a.html.tgz http://a/a.tgz http://a/a.zip … etc If the response is different from the 404 page whatever it may be, automatic detection is performed, then we have...