SIPI

Simple IP Information Tools sIPI for IP Reputation Data Analysis @st2labs Simple IP Information Tool @st2labs Author : Julian J. Gonzalez Caracuel - Twitter: @rhodius | @seguriadxato2 | @st2labs Vesion : 0.1 Abstracts This tool is aimed for Incident Response Team and anyone what's want to know th...

Argus

A Python-based toolkit for Information Gathering & Reconnaissance About The Project Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and reconnaissance. It brings together a clean, intuitive interface and a wide range of reliable modules,...

X-Recon

A utility for identifying web page inputs and conducting XSS scanning. Features: Subdomain Discovery: Retrieves relevant subdomains for the target website and consolidates them into a whitelist. These subdomains can be utilized during the scraping process. Site-wide Link Discovery: Collects all...

terra

Terra : Terra needs an Active Maintainer I'm searching for an active maintainer for Terra. I have some exciting ideas for new features and other things possible with Terra / OSINT. Would love to hear from interested folks. Mail me at [email protected] Terra : Recon tool on Social Media...

tugarecon

TugaRecon TugaRecon is an advanced reconnaissance and intelligence framework that goes beyond enumeration. It observes, interprets, remembers, and reacts — transforming subdomains into architectural intelligence. 🧭 Philosophy TugaRecon is inspired by Portuguese explorers. During the 15th and 16th...

Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

google-dorks-bug-bounty

Google Dorks for Bug Bounty A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting Live Tool Broad domain search w/ negative search site:example.com -www -shop -share -ir -mfa PHP extension w/ parameters site:example.com ext:php inurl:? API Endpoints site:example.com...

-Pegasus-Suite

Pegasus-Suite A comprehensive security toolkit with 1000+ penetration testing and security assessment tools. Author Letda Kes Dr. Sobri, S.Kom. Contact: [email protected] GitHub: github.com/sobri3195 Overview Pegasus-Suite is an all-in-one cybersecurity framework designed for security...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

enum4linux

enum4linux A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts. Enum4linux is a tool for enumerating information from Windows and Samba systems. It attempts to offer similar functionality to enum.exe formerly available from www.bindview.com. It is written in Perl and...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration tool, ability to upload multiple nuclei and gf patterns,...

sitedorks

Want to get the latest updates? Be sure to ⭐ this repo! ⭐ Now also available, Sitedorks Web ⭐ About SiteDorks Search Google, Bing, Brave, Ecosia, Yahoo or Yandex for a search term with several websites. A default list is already provided, which contains Moltbook, Grok, Github, Gitlab, Surveymonke...

SQLRecon

SQLRecon SQLRecon is a Microsoft SQL Server toolkit that is designed for offensive reconnaissance and post-exploitation. For detailed information on how to use each technique, refer to the wiki. You can download a copy of SQLRecon from the releases page. Alternatively, feel free to compile the...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

Zeus-Scanner

Annuaire des liens utiles Qu'estce que Zeus Les caractéristiques de Zeus Exigences et installation Ubuntu/Debian centOS autre Capturesécran vidéo Demo manuel d'utilisation Comment fonctionne Zeus Fonctionnalité Passant drapeaux sqlmap avec Zeus Informations légales Licence GPL Code de conduite...

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

JSScanner

JSScanner You can find the article related to this script here https://securityjunky.com/scanning-js-files-for-endpoint-and-secrets/ To install the required tools use bash install.sh Change the alive.txt with the domains you need to test. These should be in below format http://example.com...

inter-recon

inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of errors. There is a possibility to skip some checks, to restart them and/or to continue with the last point you stopped. This is because sometimes there are network issues like time limit on...

PowerMeta

PowerMeta PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them c...