inforfinder

Inforfinder =========== Inforfinder is a tool made to collect information of any domain pointing at a server ip,domain,range,file. Requires python libs: pyRequests, lxml and py3DNS You can do the installation, with pip or you can install the inforfinder app as a package using python setup.py...

richkit

Richkit Richkit 是一个 Python 3 包，提供以域名为输入并返回该域名附加信息的工具。它可以是对域名本身的分析，从数据库查询，从其他服务检索，或者它们的某种组合。 Richkit 的目的是提供一个可复用的域名分析、查询和检索函数库，这些函数在奥尔堡大学网络安全研究组内部共享，也向公众开放以供复用和修改。 文档可在 https://richkit.readthedocs.io/en/latest/ 找到。 要求 Python = 3.5 安装 要安装 Richkit，只需在终端输入 pip install richkit 用法 以下代码可用于分别检索 TLD 和 URL...

dns_amplification_scanner

Herramienta de Detección y Verificación de DDoS por Amplificación de DNS Este script está diseñado para identificar y verificar posibles servidores DNS vulnerables a la explotación en ataques de denegación de servicio distribuido DDoS por amplificación de DNS. Aborda las limitaciones de los...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

DASM: Domain-Aware Sharpness Minimization for Multi-Domain Voice Stream Steganalysis

The growing use of information hiding in network streaming media for covert communication poses a significant security threat, necessitating the development of robust detection technologies. However, existing steganalysis methods for network voice streams mostly rely on data distributions in...

TLS Certificate and Domain Feature Analysis of Phishing Domains in the Danish .Dk Namespace

Phishing attacks remain a persistent cybersecurity threat, and the widespread adoption of TLS certificates has unintentionally enabled malicious websites to appear trustworthy to users. This study examines whether certificate metadata and domain characteristics can help distinguish phishing domai...

Threat Advisory: E-commerce Bots Use Domain Registration Services for Mass Account Fraud

While researching a recent large-scale bot campaign with CQ Prime Threat Research team lead, Dean Lendrum, we found attackers using domain parking and monetization services to register multiple domains, creating a large number of fake eCommerce accounts per domain. TL; DR ------ Analysis of...

Mobile Application Reverse Engineering: MARA

Mobile Application Reverse engineering and Analysis Framework MARA is a M obile A pplication R everse engineering and A nalysis Framework. It is a tool that puts together commonly used mobile application reverse engineering tools, in order to make the task or reverse engineering and analysis easi...