OneForAll

OneForAll 👊OneForAll is a powerful subdomain integration tool 📝中文文档 🚀Start Guide 📢 Please read this document to help you start quickly! 🐍Installation requirements OneForAll is developed and tested based on Python 3.6.0, OneForAll needs to be higher than Python 3.6.0 to run. For more information o...

resolvers

Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...

spoonmap

SpooNMAP Table of Contents Dependencies Installation Usage Scanning a target without a file Where Files Live Target File ranges.txt config.json Parameters scannerprofile: reducing scanner fingerprinting interface / sourceip / routerip: fixing ambiguous routing maxrate guidance Host discovery...

EagleEye

$$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$ |$$$$$$$ |$$...

CloudBrute

CloudBrute A tool to find a company target infrastructure, files, and apps on the top cloud providers Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode. The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike. The complete writeup is available. here ...

myNetwork

myNetwork Cross-platform LAN & port scanner with a Windows XP–style desktop GUI. Discovers hosts on your segment, resolves names, MAC and vendor, and reports open TCP + UDP ports — with live monitoring and export. Screenshot shows synthetic demo data. Download Direct download of the latest releas...

SkyArk

SkyArk is a cloud security project with two main scanning modules: 1. AzureStealth - Scans Azure environments 2. AWStealth - Scan AWS environments These two scanning modules will discover the most privileged entities in the target AWS and Azure. The Main Goal - Discover The Most Privileged Cloud...

x8-Burp

This app is no longer supported The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections. Features...

SMBSR

STOP THERE! This tool is no longer mantained! Decided to merge the feature of SMBSR and RSMBI, please refer to SMBAT SMBSR - what is that? Well, SMBSR is a python script which given a CIDR/IP/IPfile/HOSTNAMEs enumerates all the SMB services listening 445 among the targets and tries to authenticat...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

pastenum

Pastenum Pastenum is a text dump enumeration tool. It is designed to help find and enumerate datadumps, and doxs posted on public sites. It currently searches sites github.com, gist.github.com, pastebin.com, pastee.org, and pastie.org. Pastenum is a gem rewrite of nullthreat's original pastenum2...

unwaf

Unwaf Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real origin IP behind a WAF/CDN by combining multiple discovery methods and verifying candidates through HTML similarity comparison, SSL certificate fingerprinting...

BurpSuite-Asset_Discover

BurpSuite Extension - Asset Discover Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details. The extension is now part of the BApp store and can be installed directly from the Burp Suite...

Invoke-CleverSpray

Invoke-CleverSpray Password Spraying Script detecting current and previous passwords of Active Directory User by @flelievre Options: -Password: Password to spray. -PasswordFile: Path to file containing a list of passwords to spray. -Username: samAccountName of the user to target. -UsernamesFile:...

ParamFinder

ParamFinder Discover hidden parameters straight from Caido! Installation Via Community Store Recommended 1. In your Caido, go to the Plugins page 2. Navigate to the Community Store 3. Search for ParamFinder 4. Click Install 5. Done! 🎉 Manual Installation 1. Navigate to the Releases page 2. Downlo...

ODIN

ODIN Observe, Detect, and Investigate Networks Current version: v2.0.0 "Huginn" ODIN is Python tool for automating intelligence gathering, asset discovery, and reporting. Remember, check the dev branch for the bleeding edge, and feedback is welcome! See the GitHub wiki for details and installatio...

DeepAudit

DeepAudit - Your AI Security Audit Team, Making Vulnerability Discovery Accessible 简体中文 | English Screenshots Agent Audit Entry Quick access to Multi-Agent deep audit from the homepage Audit Flow Logs !Audit Flow...

Project-Deep-Focus

Deep Focus A high-performance network reconnaissance tool for discovering and fingerprinting services across IP ranges. Built for security researchers and network administrators. Table of Contents 1. Overview 2. Features 3. Requirements 4. Installation 5. Usage 6. Configuration 7. Understanding...

AzureADEnumeration

Microsoft Entra ID Azure AD Unauthenticated Enumeration Source: EvilMist Toolkit - Invoke-EntraEnum.ps1 - https://github.com/Logisek/EvilMist 1. Tenant Discovery -TenantInfo Discovers tenant information using public APIs. 1.1 azmap.dev API Retrieves tenant details from the azmap.dev service...

cdpsnarf

CDPSnarf v0.1.6 Cisco Discovery Protocol Sniffer by Tasos "Zapotek" Laskos [email protected] [email protected] Licensed under the GNU General Public License v2 General CDPSnarf is a network sniffer exclusively written to extract information from CDP packets. It provides all the...