DGA

DGA Репозиторий, содержащий алгоритмы для генерации доменных имён, словари вредоносных доменных имён. Разработан для исследования возможности применения машинного обучения и нейронных сетей для обнаружения и классификации вредоносных доменов. Список списков слов alexa.csv alexa top million...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more Coded with 💙 by edoardottt Share on Twitter! Install • Usage • Get Started • Changelog • Contributing • License Installation 📡 Homebrew brew install cariddi Snap sudo snap install caridd...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

DGA

DGA Подозрительные DGA из PassiveDNS.cn и 360+VT Sandbox. Содержание NCR: Требуется подтверждение и обратный анализ Link| Status ---|--- 50| Безвредный DGA TeleRU, DGA, связанный с Android APK 49| DGA MyDoom 48| Непредсказуемый DGA 39| Готово Новые семена Banjori 38| Готово Новый DGA: XshellGhost...

dga-collection

Коллекция DGA Коллекция известных алгоритмов генерации доменов: Torpig ZeusBot Cryptolocker Necurs Symmi Ranbyus Использование Для каждого DGA список доменов легко генерируется: from datetime import date from Necurs import Necurs Compute domains for the current day/period: Necurs.domains Compute...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

socgholish_finder

SocGholish Finder Простой скрипт для сканирования веб-сайта на наличие инъекции SocGholish. Он проверяет и отображает инъекцию, если она найдена, а также деобфусцирует и показывает теневые URL-домены. usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h...

Minesweeper

Un plugin Burpsuite BApp pour aider à la détection de scripts chargés depuis plus de 23000+ domaines malveillants de minage de cryptomonnaies cryptojacking. Résumé Minesweeper analysera passivement les éléments dans le champ d'application à la recherche de correspondances avec plus de 23000+...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

associated-threat-analyzer

Associated-Threat-Analyzer NOTE : Que disent les lois sur la vie privée à propos du partage de domaines et d'IP malveillants ? Veuillez consulter ; USAGEPOLICY.md LICENSE Description Associated-Threat-Analyzer détecte les adresses IPv4 et les noms de domaine malveillants associés à votre...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program mallory -config path/to/config.jso...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation bundle install Current Algorithms...

catphish

CATPHISH 피싱 공격을 위해 유사한 도메인을 생성합니다. 만료된 도메인과 분류 상태를 확인하여 프록시 분류를 우회합니다. 화이트리스트에 등록된 도메인은 C2 서버에 완벽합니다. Red Team 활동에 적합합니다. 설치 bundle install 현재 알고리즘 SingularOrPluralise prependOrAppend doubleExtensions mirrorization homoglyphs dashOmission Punycode Version 1.1.0: The parser for command line option...

EvilURL

EvilURL v3.0 Générer des domaines unicode pour l'attaque par homographie IDN et les détecter. EvilURL est distribué sous licence BSD. Voir LICENSE pour plus de détails. CLONER git clone https://github.com/UndeadSec/EvilURL.git INSTALLER pip install python-nmap python-whois EXÉCUTION cd EvilURL...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...