UserEnumJira

This repository does not have a README...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

uDork

uDork - Google Hacking Tool Author: M3n0sD0n4ld Twitter: @DavidUton News 11/06/2022 I have some bad news to give, last week Facebook withdrew the service by which the tool made the requests, unfortunately the tool no longer works. Sorry, thank you very much to all the users who have been using it...

Google-api-key-scanner

Overview A Python tool for testing Google Maps API keys against 21 different Google API endpoints to check which services are exposed and vulnerable. !IMPORTANT 🎥 For a complete walkthrough of the tool, watch the demo video here: https://youtu.be/3KMUnLdlOSE. The feature shown below starts at...

scilla

🏴‍☠️ 信息收集工具 🏴‍☠️ - DNS / 子域名 / 端口 / 目录枚举 由 edoardottt 用 💙 编码 在 Twitter 上分享！ 安装 • 快速开始 • 示例 • 更新日志 • 贡献 • 许可证 安装 📡 Homebrew root@kitploit: brew install scilla Snap root@kitploit: sudo snap install scilla Golang root@kitploit: go install -v github.com/edoardottt/scilla/cmd/scilla@latest 从源码构建 你需要 Go...

Ashok

Ashok Incredible Fast Recon Swiss Army Knife 📌 Introduction Reconnaissance is the first phase of penetration testing which means gathering information before any real attacks are planned So Ashok is an Incredible fast recon tool for penetration tester which is specially designed for Reconnaissanc...

goGetBucket

goGetBucket - AWS S3 Bucket discovery through alterations and permutations Warning: code is horrible as I have only used this for personal use. When I get the time I will make it less-horrible and faster. When performing a recon on a domain - understanding assets they own is very important. AWS S...

CloudFail

CloudFail CloudFail 是一款战术侦察工具，旨在收集足够多的关于受 Cloudflare 保护的目标的信息，以期发现服务器的真实位置。该工具使用 Tor 掩盖所有请求，目前拥有 3 种不同的攻击阶段。 1. 利用 DNSDumpster.com 进行错误配置的 DNS 扫描。 2. 扫描 Crimeflare.com 数据库。 3. 暴力破解超过 2500 个子域名。 欢迎为此项目贡献。如果您有想法或改进，请提交拉取请求！ 免责声明 该工具是一个概念验证（PoC），不保证结果。有可能正确配置 Cloudflare，使得 IP...

SR-71

All in One Recon Tool The purpose of this tool is to help bug hunters and pentesters during reconnaissance... Installation: Can be used on any system with python3 You can easily install SR-71 using pip: root@kitploit: pip3 install SR-71 To use it, just type "SR-71 " in your terminal If you want t...

SCANNER-INURLBR

New repository Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. https://github.com/MrCl0wnLab/SCANNER-INURLBR...

BigBountyRecon

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It...

ocr-recon

ocr-recon 该工具利用 tesseract 的 OCR（光学字符识别）功能，在 URL 列表中查找特定字符串。 用法 用法: python3 ocr-recon.py listwithURLs stringtosearch...

AggressorAssessor

Various initial recon aggressor scripts...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

ADCollector

ADCollector ADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment as a starting point. Notes: ADCollector is not an alternative to the powerf...

shodan-eye

Shodan Eye This tool collects all information about all devices that are directly connected to the internet with the specified keywords that you enter. This way, you get a complete overview. Here you can read the latest article about Shodan Eye:...

reconspider

最先进的开源情报（OSINT）框架 ReconSpider ReconSpider 是最先进的开源情报（OSINT）框架，用于扫描 IP 地址、电子邮件、网站、组织，并从不同来源获取信息。 ReconSpider 可供信息安全研究人员、渗透测试人员、漏洞猎手和网络犯罪调查人员使用，以深入挖掘目标信息。 ReconSpider 聚合所有原始数据，在仪表板上可视化，并支持基于数据的告警和监控。 ReconSpider 还结合了 Wave、Photon 和 Recon Dog 的功能，以全面枚举攻击面。 为什么叫 ReconSpider？ ReconSpider = Recon + Spide...

Jbin-website-secret-scraper

🎖️ Jbin will gather all the URLs from the website and then it will try to expose the secret data from them. It collects both URLs and JS links to scrape secrets out of it. Also if you are looking for a specific string in a page or want to run custom regex then you can do that too now with the new...

CamXploit

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CamXploit is a security reconnaissance tool designed to help researchers and defenders assess whether an IP address is hosting a potentially exposed IP camera or CCTV service. The tool performs non-intrusive checks such as...

sublert

root@kitploit: / / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / 作者：Yassine Aboukir 版本：1.4.7 这是关于什么的？ Sublert 是一个用 Python 编写的安全与侦察工具，利用证书透明度，专门用于监控特定组织部署的新子域名及其颁发的 TLS/SSL 证书。该工具应被安排为定期在固定时间、日期或间隔运行（理想情况下每天一次）。新识别出的子域名将通过通知推送到 Slack 工作区。此外，该工具还会执行 DNS 解析以确定可用的子域名。 要求 运行在...