lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...

vhosts-sieve

VHosts Sieve Searching for virtual hosts among non-resolvable domains. Installation git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Usage Get a list of subdomains e.g. using Amass $ amass enum -v -passive -o domains.txt -d example.com -d...

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] À propos d'Honeyd : Honeyd est un petit démon qui crée des hôtes virtuels sur un réseau. Les hôtes peuvent être configurés pour exécuter des services arbitraires, et leur personnalité TCP peut être adaptée pour qu'ils semblen...

hblock

Améliorez votre sécurité et votre vie privée en bloquant les domaines de publicité, de pistage et de logiciels malveillants. À quoi cela sert-il ? hBlock est un script shell conforme à POSIX qui récupère une liste de domaines diffusant des publicités, des scripts de pistage et des logiciels...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

wp-allowed-hosts

WP Allowed Hosts Этот плагин был создан после раскрытия уязвимости, известной как CVE-2017-8295. Этот плагин защитит вас от этой атаки без лишних хлопот — просто добавьте одну строку в ваш wp-config.php. Установка Просто скачайте плагин здесь и загрузите его на ваш сайт. Использование Просто...

vbrute

vbrute Bruteforceur d'hôtes virtuels. Spécifiez un fichier contenant les domaines et un fichier contenant les adresses IP, et vbrute tentera de se connecter à l'adresse IP avec le domaine spécifié. Utilisation : vbrute --domain-file --ip-file -d, --domain-file Spécifiez le fichier contenant la...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

Cloudcheck

Cloudcheck Cloudcheck est conçu pour être utilisé dans le même dossier que CloudFail. Assurez-vous que tous les fichiers de ce dépôt sont dans le même dossier avant utilisation. Créez également un fichier texte vide nommé none.txt dans le dossier data, ainsi il n'effectuera pas de bruteforce de...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

hosts

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

uncover

Découvrez rapidement les hôtes exposés sur Internet en utilisant plusieurs moteurs de recherche. Fonctionnalités • Installation • Utilisation • Configuration • Exécuter Uncover • Rejoindre Discord uncover est un wrapper Go qui utilise les API de moteurs de recherche connus pour découvrir rapideme...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

WordPress <= 6.2 - Server Side Request Forgery

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden. id: CVE-2022-3590 info: name: WordPress = 6.2 - Server Side...

Monstra CMS 3.0.4 - HTTP Header Injection

Monstra CMS 3.0.4 is susceptible to HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter. An attacker can potentially supply invalid input and cause the server to allow redirects to attacker-controlled domains, perform cache poisoning, and/or allow improper access to...