EDD

CodeFactor EDD Enumerate Domain Data is designed to be similar to PowerView but in .NET. PowerView is essentially the ultimate domain enumeration tool, and we wanted a .NET implementation that we worked on ourselves. This tool was largely put together by viewing implementations of different...

NTLMRecon

NTLMRecon An NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an entire CID...

Find-AdminAccess

FindAdminAccess A C utility that enumerates domain computers and tests administrative access to them, including connectivity checks, admin privileges verification, and C$ share writability testing. Features Enumerate all computers in an Active Directory domain Test network connectivity Verify...

ADReaper

ADReaper ADReaper is a tool written in Golang which enumerates an Active Directory environment with LDAP queries within few seconds Installation You can download precompiled executable binaries for Windows/Linux from latest releases Install from source To build from source, clone the repo and bui...

cloud

Cloud Monitoreando el Panorama de la Nube Nuestra misión con este proyecto es ofrecer un mapa siempre actualizado y de libre acceso del panorama de la nube para cada uno de los principales proveedores de servicios en la nube. Decidimos comenzar recolectando datos de certificados SSL de máquinas A...

RustHound

This version is only compatible withBloodHound Legacy 4.x Version compatible withBloodHound Community Edition CE can be found here RustHound-CE. Summary Limitation Description How to compile it? Using Makefile Using Dockerfile Using Cargo Linux x8664 static version Windows static version from Lin...

Findomain

Findomain The complete solution for domain recognition. Supports screenshotting, port scanning, importing data from other tools, subdomain monitoring, and more. Be alerted on your findings through services such as Discord, Slack, and Telegram. Multiple API Keys for sources and much more. Chat wit...

ADSearch

ADSearch A tool written for cobalt-strike's execute-assembly command that allows for more efficent querying of AD. Key Features List all Domain Admins Custom LDAP Search Connect to LDAPS Servers Output JSON data from AD instances Retrieve custom attributes from a generic query i.e. All computers...

Active-Directory-Exploitation-Cheat-Sheet

Active Directory Exploitation Cheat Sheet This cheat sheet contains common enumeration and attack methods for Windows Active Directory. ℹ️ This repository was created by Nikos Katsiopis and Nikos Vourdas. This cheat sheet is inspired by the PayloadAllTheThings repo. Summary Active Directory...

indicator-intelligence

Indicator-Intelligence NOTE : You should definitely use it for legal activities. Please See; USAGEPOLICY.md LICENSE Description Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files ScreenShot Done Releated domains, IPs collect. HTTP...

AnalyticsRelationships

AnalyticsRelationships This script try to get related domains / subdomains by looking at Google Analytics IDs from a URL. First search for ID of Google Analytics in the webpage and then request to builtwith and hackertarget with the ID. Note : It does not work with all websites. It is searched by...

cngo

cngo v1 Fast Golang Tool take a filename with domains and get cname for every domain s Install root@kitploit: $ go get -u github.com/yghonem14/cngo Basic Usage cngo accepts only text files: root@kitploit: $ cngo -f /targets/spotify.txt creativeservice.spotify.com -...

CredNinja

This tool is intended for penetration testers who want to perform an engagement quickly and efficiently. While this tool can be used for more covert operations including some additions below, it really shines when used at the scale of a large network. At the core of it, you provide it a list of...

fprobe

FProbe FProbe - Sonda HTTP rápida Instalación root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Características Toma una lista de dominios/subdominios y prueba si tienen servidores http/https funcionando. Optimiza RAM y CPU en tiempo de ejecución. Soporta puertos especiales...

vbrute

vbrute Fuerza bruta de hosts virtuales. Especifica un archivo que contenga dominios y un archivo que contenga direcciones IP, y vbrute intentará conectarse a la IP con el dominio específico. Usage: root@kitploit: vbrute --domain-file --ip-file -d, --domain-file Specify file containing a list of...

Goohak

GooHak ABOUT: Automatically launch google hacking queries against a target domain to find vulnerabilities and enumerate a target. DEPENDENCIESLinux: xdg-open Linux LINUX USAGE: root@kitploit: ./goohak domain.com LICENSE: This software is free to distribute, modify and use with the condition that...

cloudbunny

CloudBunny CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. You can read more about the tool here: https://tinyurl.com/y8p48wb3 How works In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To use the tools...

assetfinder

assetfinder Encuentra dominios y subdominios potencialmente relacionados con un dominio dado. Instalación Si tienes Go instalado y configurado es decir, con $GOPATH/bin en tu $PATH: root@kitploit: go get -u github.com/tomnomnom/assetfinder De lo contrario, descarga una versión para tu plataforma...

mkpath

mkpath Crea combinaciones de rutas de URL usando una lista de palabras Lee un archivo de lista de palabras y genera combinaciones de rutas para un dominio o una lista de dominios. La entrada del archivo de lista de palabras se convierte a minúsculas y se procesan las palabras únicas. Además, la...

SharpHound2

THIS IS NOW DEPRECATED IN FAVOR OF SHARPHOUND3. DATA COLLECTED USING THIS METHOD WILL NOT WORK WITH BLOODHOUND 3.0 SharpHound - C Rewrite of the BloodHound Ingestor Get SharpHound The latest build of SharpHound will always be in the BloodHound repository here Compile Instructions Sharphound is...