seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

kostebek

Reconnaissance Tool Introduction The Kostebek is a reconnaissance tool which uses firms' trademark information to discover their domains. Reference : https://evren.ninja/en/post/recon-is-everywhere/ Demo video : Setup Downloading Kostebek git clone https://github.com/esecuritylab/kostebek...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure

Gogs before version 0.14.3 contains an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint returns all teams for any organization without requiring authentication. The route group lacks the reqToken middleware, exposing team IDs, names, descriptions,...

Github Enterprise - Remote Code Execution

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing! Explore the docs » ‼️ Important Links...

Benchmark

OWASP Benchmark 项目的 GitHub 仓库已迁移。现在有一个新的 OWASP Benchmark GitHub 组织，地址为： https://github.com/OWASP-Benchmark 原来的 https://github.com/OWASP/Benchmark 现在变更为：https://github.com/OWASP-Benchmark/BenchmarkJava 随着时间的推移，新的 OWASP Benchmark 项目将添加更多子项目，例如 BenchmarkUtils、BenchmarkDotNet 等。...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

git-alerts

GitAlerts ¿Qué problema resuelve? Los repositorios de GitHub creados bajo cualquier organización pueden ser controlados por los administradores de GitHub. Sin embargo, cualquier repositorio creado bajo la cuenta de un usuario de la organización no es controlable a menos que la organización haya...

Mindmap

Hacking Articles- Cyber Security Mindmap A comprehensive collection of cybersecurity mind maps covering technologies, tools, methodologies, courses, and certifications used in the security industry. This repository organizes complex cybersecurity concepts into visual tree structures, making it...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

dorky

Dorky Dorky es una herramienta de línea de comandos que busca coincidencias en nombres de organizaciones, nombres de repositorios y nombres de usuario en GitHub y GitLab a partir de una lista de palabras de entrada. Esta herramienta puede ser útil para identificar posibles objetivos en evaluacion...

rmm

Recon MindMap RMM Tomando inspiración del taller TBHM v4 recon edition by Jason Haddix, desarrollé una herramienta de interfaz de línea de comandos CLI que simplificará la tarea de organizar una lista de dominios y subdominios. El objetivo es crear una herramienta que pueda generar fácilmente...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

Redeye

Redeye 该项目由渗透测试人员为渗透测试人员构建。 Redeye 是一款旨在帮助您在渗透测试操作中以最高效、最有条理的方式管理数据的工具。 目录 Redeye 目录 开发者 概述 安装 Docker 源码 通用 特别感谢 致谢 开发者 Daniel Arad - @dandanarad && Elad Pticha - @eladpt 概述 服务器面板将显示所有已添加的服务器及服务器基本信息，例如：拥有用户、开放端口以及是否已被攻破。 进入服务器后，将出现一个编辑面板。我们可以添加在服务器上发现的新用户、发现的漏洞，并添加相关的成果和文件。...

moniorg

moniorg 描述 攻击者通过查看证书透明度日志，可以完全被动地收集大量关于组织基础设施的信息，例如内部域名、电子邮件地址。 moniorg 利用证书透明度日志，根据 SSL 证书中的组织字段来监控新颁发的域名。 安装 root@kitploit: git clone https://github.com/yousseflahouifi/moniorg.git 依赖要求 使用的 Python 版本：Python 3.x。 moniorg 依赖几个模块来运行： root@kitploit: pip install os sys termcolor difflib json argpars...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...