getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

certbot

.. Este archivo contiene una serie de comentarios que se utilizan para incluir secciones de este README en otros archivos. No modifiques estos comentarios a menos que sepas lo que estás haciendo. tag:intro-begin |build-status| .. |build-status| image::...

CVE-2014-1266-poc

OS X/iOS SSL 漏洞概念验证 概述 此存储库包含一些Go代码，用于演示最近发现的iOS和OS X中的SSL验证漏洞。 Apple更新公告 Adam Langley 的分析文章 使用方法 $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd CVE-2014-1266-poc $ go build main.go $ ./main In another terminal $ cd CVE-2014-1266-poc $ go run httpserver.go...

goproxy

GoProxy GoProxy es una librería para crear un servidor proxy HTTP/HTTPS personalizado usando Go también conocido como Golang, con varios ajustes configurables disponibles. El objetivo de este proyecto es ofrecer un servidor proxy optimizado, utilizable con una cantidad razonable de tráfico, pero...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

proxy2

proxy2 Proxy HTTP/HTTPS en un único script de Python Características fácil de personalizar no requiere módulos externos soporta IPv4 e IPv6 soporta Conexión Persistente HTTP/1.1 soporta generación dinámica de certificados para la interceptación de HTTPS Este script funciona con Python 2.7...

ddoor

ddoor 使用DNS TXT记录的跨平台后门 什么是ddor? ddor 是一个跨平台轻量级后门，使用TXT记录在受感染机器上执行命令。 特性 允许单个TXT记录为Linux和Windows机器分别设置命令 大约10个公共DNS服务器的列表，随机选择 不可预测的回调时间 使用自定义密码的XOR加密TXT记录 支持DNS over HTTPS（感谢Keith @keharv添加此功能！） Linux特性: 反调试，如果检测到ptrace附加到进程，它将退出。 进程名称/线程名称被隐藏，一个假名称覆盖所有系统参数和文件名，使其看起来像合法程序。 自动守护进程化...

TrustTunnel

Clients · App Store iOS · App Store macOS · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuratio...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...

oproxy

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

setup-wordpress-with-security-best-practice

Setup WordPress With Security Best Practice This document is written with the aim of being suitable for web applications developed using WordPress that do not interact with users. It is primarily intended for corporate brand pages, various static views, recruitment pages, and similar sites. For...

dnscrypt-proxy

Descripción general Un proxy DNS flexible, con soporte para protocolos DNS cifrados modernos como DNSCrypt v2, incluyendo DNSCrypt Post-Quantum DNSCrypt 2026, DNS-over-HTTPS, DNSCrypt Anonimizado y ODoH Oblivious DoH. Documentación de dnscrypt-proxy ← Empieza aquí Página principal del proyecto...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

nextdns

NextDNS CLI Client NextDNS CLI es una herramienta de línea de comandos que te permite usar el servicio DNS-over-HTTPS DoH de NextDNS con capacidades avanzadas. Aunque las funciones más avanzadas solo funcionarán con NextDNS, este programa puede funcionar como cliente para cualquier proveedor de D...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest Para el trabajo de InfoSec, usar HTTPS es un mecanismo increíblemente práctico para C2 y para maniobrar dentro del espacio de red objetivo. Además, PowerShell es una herramienta de productividad asombrosa que puede ayudar a un operador a lograr resultados dinámicos. Un...