CloudFail

CloudFail CloudFail ist ein taktisches Aufklärungstool, das darauf abzielt, genügend Informationen über ein durch Cloudflare geschütztes Ziel zu sammeln, um den Standort des Servers zu ermitteln. Mit Tor werden alle Anfragen maskiert. Das Tool verfügt derzeit über 3 verschiedene Angriffsphasen. 1...

OffensiveNim

OffensiveNim Meine Experimente zur Bewaffnung von Nim für die Entwicklung von Implantaten und allgemeine offensive Operationen. Inhaltsverzeichnis OffensiveNim Inhaltsverzeichnis Warum Nim? Beispiele in diesem Repository, die funktionieren Beispiele, die noch in Arbeit sind Die Beispiele in diese...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

howdy

Howdy bietet eine Windows Hello™-ähnliche Authentifizierung für Linux. Nutzen Sie Ihre eingebauten IR-Emitter und Kamera in Kombination mit Gesichtserkennung, um Ihre Identität zu bestätigen. Dank des zentralen Authentifizierungssystems PAM funktioniert dies überall dort, wo Sie sonst Ihr Passwor...

ffuf

ffuf - Fuzz Faster U Fool Un veloce web fuzzer scritto in Go. Installazione Esempio di utilizzo Scoperta dei contenuti Scoperta di vhost Fuzzing di parametri Fuzzing di dati POST Utilizzo di un mutator esterno File di configurazione Aiuto Modalità interattiva Installazione Scarica un binario...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

exphub

Notice Alla fine ho comunque pensato che avere uno script separato per ogni vulnerabilità fosse molto scomodo, quindi ho riunito tutti gli script PoC ed exploit in un unico posto, consentendo scansione e sfruttamento con un solo clic. Dato che ultimamente sto lavorando all'integrazione, Exphub è...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

Invoke-Obfuscation

Invoke-Obfuscation v1.8 Introduzione Invoke-Obfuscation è un comando PowerShell compatibile con PowerShell v2.0+ e un offuscatore di script. Contesto Nell'autunno del 2015 ho deciso di iniziare a ricercare la flessibilità del linguaggio PowerShell e ho catalogato i vari modi per realizzare una...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

PRET

PRET - Printer Exploitation Toolkit Ist Ihr Drucker sicher? Überprüfen Sie es, bevor es jemand anderes tut... PRET ist ein neues Werkzeug für Druckersicherheitstests, das im Rahmen einer Masterarbeit an der Ruhr-Universität Bochum entwickelt wurde. Es verbindet sich über Netzwerk oder USB mit ein...

web-check

Web-Check Intelligence open source completa e on-demand per qualsiasi sito web 🌐web-check.xyz Gentilmente supportato da: Terminal Trove La $HOME di ogni cosa nel terminale | Warp Progettato per programmare con più agenti AI ---|--- Indice Informazioni Screenshot Live Demo Mirror Funzionalità...

social-analyzer

Social Analyzer - API, CLI e app Web per analizzare e trovare il profilo di una persona su oltre 1000 social media \ siti web. Include diversi moduli di analisi e rilevamento, e puoi scegliere quali moduli utilizzare durante il processo di indagine. I moduli di rilevamento utilizzano un meccanism...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

authelia

!OpenSSF Best...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

awesome-osint

Awesome OSINT A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence OSINT is intelligence collected from publicly available sources. In the intelligence community IC, the term "open" refers to overt, publicly available sources as opposed to...

kerbrute

Kerbrute Ein Tool zum schnellen Bruteforcen und Aufspüren gültiger Active-Directory-Konten durch Kerberos-Pre-Authentication Laden Sie die neuesten Binärdateien von der Releases-Seite herunter, um loszulegen. Hintergrund Dieses Tool entstand aus einigen bash-Skripten, die ich vor ein paar Jahren...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...