ADCollector

ADCollector ADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment as a starting point. Notes: ADCollector is not an alternative to the powerf...

awesome-cybersecurity-resources

awesome-cybersecurity-resources Awesome Cybersecurity Resources, more. Purpose This repository stores curated cybersecurity resources gathered from the internet, repository documentation, and selected local notes. The canonical format is: one resource per Markdown file YAML frontmatter as the...

web-scanner

🌐 Web Scanner Tool 🌐 Developed by tmrswrr Version 1.0.0 A comprehensive tool for Web Domain Scanning including Subdomain Discovery, Directory Enumeration, Network Scanning, and Website Identification. 📷 Screenshots 📷 👇 💫 How to Use 💫 👇 📒 Read Me 📒 The Advanced Web Scanner is a versatile...

vulnhuntr

A tool to identify remotely exploitable vulnerabilities using LLMs and static code analysis. World's first autonomous AI-discovered 0day vulnerabilities Description Vulnhuntr leverages the power of LLMs to automatically create and analyze entire code call chains starting from remote user input an...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

dnsbrute

dnsbrute Multi-theaded DNS bruteforcing, average speed 80 lookups/second with 40 threads root@kitploit: Usage: dnsbrute.py threads...

crithit

crithit Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall...

datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

altdns

Altdns - परिवर्तनों और क्रमपरिवर्तनों के माध्यम से सबडोमेन खोज Altdns एक DNS recon उपकरण है जो पैटर्न के अनुरूप सबडोमेन की खोज की अनुमति देता है। Altdns उन शब्दों को इनपुट के रूप में लेता है जो किसी डोमेन के अंतर्गत सबडोमेन में मौजूद हो सकते हैं जैसे test, dev, staging साथ ही सबडोमेन की एक सूची भ...

altdns

Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...

scout

Scout Scout एक URL फ़ज़र और स्पाइडर है जो वेब सर्वर पर अज्ञात वीहोस्ट, फ़ाइलों और निर्देशिकाओं की खोज करता है। बाइनरी में एक पूर्ण शब्द सूची शामिल है, जिसका अर्थ है अधिकतम पोर्टेबिलिटी और न्यूनतम कॉन्फ़िगरेशन। निशाना लगाओ और फायर करो! उपयोग root@kitploit: Usage: scout command Available Commands:...

dns-zone-transfer-test

DNS Zone Transfer Test Automates Domain Name System DNS zone transfer testing. Automatically finds a given domains nameservers, and tests for zone transfers, if successfully, identified A records are printed to standard output. Usage root@kitploit: dztt zonetransfer.me dztt -f domains.txt dztt -n...

SSH_Enum_CVE-2018-15473

SSH Username Enumeration Exploit This script is a modified version of an original exploit that allows enumeration of SSH users on vulnerable servers OpenSSH 2.3 7.7. Functionality The script uses a vulnerability in the SSH protocol to enumerate valid users on the target server. It can enumerate...

Oh365UserFinder

Oh365 User Finder v1.1.2 Oh365UserFinder se utiliza para identificar cuentas y dominios válidos de O365 sin el riesgo de bloqueo de cuentas. La herramienta analiza las respuestas para determinar si la bandera "IfExistsResult" es nula o no, y responde adecuadamente si el usuario es válido. La...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

swaggerHole

A python3 script searching for secret on swaggerhub Introduction • Requirements • Installation • Usage • Output explanation • Thanks Created by Liodeus Introduction This tool is made to automate the process of retrieving secrets in the public APIs on swaggerHub. This tool is multithreaded and pip...

pwnedOrNot

Outil OSINT pour trouver les mots de passe de comptes email compromis Créé par Lohitya Pushkar thewhiteh4t. Twitter - Blog Disponible| dans| ---|---|--- BlackArch Linux| SecBSD| Tsurugi Linux | | pwnedOrNot fonctionne en deux phases. Dans la première phase, il teste l'adresse email donnée en...

scavenger

scavenger scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information. Problem Definition: Scavenger confronts a challenging issue typically faced by...

Turbolist3r

Project Status Please note I am not actively supporting this project. I may return to subdomain research at some point but my security interests lie elsewhere at the moment and my time is divided among other things. If you find an issue feel free to send a PR or fork it into your own project...

scripthunter

scripthunter Scripthunter is a tool that finds javascript files for a given website. To scan Google, simply run ./scripthunter.sh https://google.com. Note that it may take a while, which is why scripthunter also implements a notification mechanism to inform you when a scan is finished via Telegra...