autoenum

root@kitploit: / / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Summary Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing...

awesome-attack-surface-management

Awesome Attack Surface Management A curated list of tools, resources, and best practices for Attack Surface Management ASM, External Attack Surface Management EASM, and continuous security monitoring. Attack Surface Management is the continuous discovery, analysis, classification, and monitoring ...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

SCANNER-INURLBR

New repository Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. https://github.com/MrCl0wnLab/SCANNER-INURLBR...

mwebfp

LNHG - أداة بصمة الويب الضخمة mwebfp مقدمة تم تصميم أداة "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " من الآن فصاعدًا في يوليو 2013 بعد إدراك فائدة لقطات شاشة خادم الويب لمختبري الاختراق، أثناء مشاركة في نطاقات كبيرة من عناوين IP الخارجية أو الداخلية، كوسيلة سريعة لتحديد الأصول الحيوية...

edge

Cloud edge - Whois for the Cloud Lookup an IP to find the cloud provider and other details based on the provider's published JSON, CSV, or text data Cloud edge is a recon tool focused on exploring cloud service providers. It can be used for cloud attribution and forensics, pentesting, bug bounty,...

KingOfBugBountyTips

KingOfBugBountyTips The Ultimate Bug Bounty Reconnaissance Arsenal "In the shadows we hunt, in the code we trust" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope DoD Vulnerability Disclosure Program | KingRecon DOD Full DoD Scope - 19 Domains root@kitploit: BBRF Scope - All DoD Domains bbrf...

brutus

The Brutus Exploitation Framework An educational exploitation framework shipped on a modular and highly extensible multi-tasking and multi-processing architecture. Table of Contents Introduction Demos Installation Usage Features Documentation MAC Address Management ARP Network Scanner ARP Spoofin...

enum4linux

enum4linux A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts. Enum4linux is a tool for enumerating information from Windows and Samba systems. It attempts to offer similar functionality to enum.exe formerly available from www.bindview.com. It is written in Perl and...

SharpView

SharpView .NET port of PowerView Usage: root@kitploit: C:\SharpView.exe Get-DomainController -Domain test.local -Server dc.test.local -Credential [email protected]/password root@kitploit: C:\SharpView.exe Get-DomainController -Help Get-DomainController -Domain -Server -DomainController -LDAP...

gospider

GoSpider GoSpider - عنكبوت ويب سريع مكتوب بلغة Go دمج Gospider بسهولة في سير عمل الاستطلاع الخاص بك؟ كان هذا المشروع جزءًا من محرك Osmedeus. تحقق من كيفية دمجه على @OsmedeusEngine التثبيت تثبيت باستخدام Go root@kitploit: GO111MODULE=on go install github.com/jaeles-project/gospider@latest باستخدام...

GATOR

GCP ATTACK TOOLKIT FOR OFFENSIVE RESEARCH GATOR - GCP Attack Toolkit for Offensive Research , a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to...

redjoust

ᵔᴥᵔ RedJoust A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Written in nodeJS and Electron. Join the community Join the community of Kawaiipantsu / THUGSred and participate in the dev talk around Redjoust or simpl...

PowerZure

For a list of functions, their usage, and more, check out https://powerzure.readthedocs.io What is PowerZure? PowerZure is a PowerShell project created to assess and exploit resources within Microsoft’s cloud platform, Azure. PowerZure was created out of the need for a framework that can both...

AnalyticsRelationships

AnalyticsRelationships This script try to get related domains / subdomains by looking at Google Analytics IDs from a URL. First search for ID of Google Analytics in the webpage and then request to builtwith and hackertarget with the ID. Note : It does not work with all websites. It is searched by...

-Pegasus-Suite

Pegasus-Suite مجموعة أدوات أمنية شاملة تضم أكثر من 1000 أداة لاختبار الاختراق وتقييم الأمان. المؤلف Letda Kes Dr. Sobri, S.Kom. جهة الاتصال: [email protected] جيت هاب: github.com/sobri3195 نظرة عامة Pegasus-Suite هو إطار عمل شامل للأمن السيبراني مصمم لمحترفي الأمن، ومختبر الاختراق، والقراصنة...

WEBFANG

WEBFANG v2.0 Disclaimer: Webfang is a CLI developed and engineered as a Reconnaissance toolkit for ethical hackers, blue teamers, and red teamers. It performs passive and active reconnaissance using spidering, Subdomain Scanning, WHOIS, DNS, Shodan, and header fingerprinting. WEBFANG is intended...

osint-tools-mcp-server

🔍 OSINT Tools MCP Server A comprehensive MCP server that exposes multiple OSINT tools to AI assistants like Claude. This server allows AI to perform sophisticated reconnaissance and information gathering tasks using industry-standard OSINT tools. 🛠️ Available Tools 🔍 Sherlock - Username Search...

wprecon

WPRecon A powerful, template-driven WordPress reconnaissance and vulnerability scanning tool Features • Installation • Usage • Architecture • Templates 📋 Overview WPRecon is a modern WordPress security reconnaissance tool built with Go that helps security engineers identify vulnerabilities,...

ctfr

CTFR Do you miss AXFR technique? This tool allows to get the subdomains from a HTTPS website in a few seconds. How it works? CTFR does not use neither dictionary attack nor brute-force, it just abuses of Certificate Transparency logs. For more information about CT logs, check...