httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

RTTM

Real Time Threat Monitoring Tool V2.0 Monitoring possible threats of your company on Internet is an impossible task to be achieved manually. Hence many threats of the company goes unnoticed until it becomes viral in public. Thus causing monetary/reputation damage. This is where RTTM comes into...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

CVE-2024-50986

CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...

Pompem

Pompem - Exploit and Vulnerability Finder Pompem is an open source tool, designed to automate the search for Exploits and Vulnerability in the most important databases. Developed in Python, has a system of advanced search, that help the work of pentesters and ethical hackers. In the current...

Passhunt

Passhunt Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords. Screenshot Pre-requisites Make sure you have installed the following: root@kitploit: - Python 3.0 or later. - pip3...

awesome-search-queries

Awesome Search Queries Community curated list of search queries for various categories across multiple search engines. Welcome to Awesome Search Queries, a community-driven project to create an index of search queries for various categories across multiple search engines. This project is inspired...

device-pharmer

device-pharmer Concurrently open either Shodan search results, a specified IP, IP range, domain, or list of IPs from a text file and print the status and title of the page if applicable. Add the -u and -p options to attempt to login to the page first looking for a form login and failing that,...

bruteforce-wallet

bruteforce-wallet 本程序旨在尝试找出加密的 Peercoin（或 Bitcoin、Litecoin 等）钱包文件（即 wallet.dat）的密码。 它有两种使用方式： 根据给定字符集尝试所有可能的密码 尝试文件中包含的所有密码 有一个命令行选项可以指定要使用的线程数。 向正在运行的 bruteforce-wallet 进程发送 USR1 信号，它会打印进度并继续。 穷举模式...

domain

概述 Recon-ng 和 Alt-DNS 很棒。这个脚本结合了这些工具的强大功能，并能在同一会话中运行多个域名。 TL;DR：我只想通过一条命令完成子域名发现，然后搞定。 只有一个模块需要API密钥（/api/googlesite），在recon-ng维基上可以找到相关说明。 该脚本利用recon-ng枚举子域名。使用Google抓取、Bing抓取、百度抓取、Yahoo抓取、Netcraft和暴力破解来查找子域名。此外，还能解析为IP地址。 前置条件 从源码安装recon-ng 1. 克隆Recon-ng仓库 git clone...

mitigate-folina

mitigate-folina Mitiga la vulnerabilidad 'Folina' ZeroDay CVE-2022-30190 y la 'Search'-Nightmare sin CVE asignado por el momento Este script hará una copia de seguridad y luego eliminará la clave de registro afectada según lo sugerido por Microsoft para mitigar CVE-2022-30190. Si se parametriza c...

goodoldsearch-oss

Good Old Search Build precise search queries with exact phrases, site filters, exclusions, date ranges, filetypes, and one-click links across search engines and vertical search targets. This is not a search engine, metasearch aggregator, scraper, or API proxy. It is a local static query builder...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

Cr3dOv3r

Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with the most useful details about the leak Using haveibeenpwned API and tries to get the plain text password...

shodan

Shodan 搜索技巧 by twitter.com/lothos612 欢迎提出建议 Shodan 搜索技巧 基础 Shodan 过滤器 city: 查找特定城市的设备。 city:"Bangalore" country: 查找特定国家的设备。 country:"IN" geo: 通过指定地理坐标查找设备。 geo:"56.913055,118.250862" 位置 country:us country:ru country:de city:chicago hostname: 查找匹配主机名的设备。 server: "gws" hostname:"google"...

shodan-eye

Shodan Eye This tool collects all information about all devices that are directly connected to the internet with the specified keywords that you enter. This way, you get a complete overview. Here you can read the latest article about Shodan Eye:...

CVE-2023-27704

CVE-2023-27704 CVE-2023-27704 Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS fix at Everything 1.5 alpha Suggested description Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of...

twitter-advanced-search

🔍 Advanced Search on Twitter These operators work on Web, Mobile, Tweetdeck. There is some overlap, but largely these will not work for v1.1 Search, Premium Search, or v2 Search APIs. Adapted from TweetDeck Help, @lucahammer Guide, @eevee Twitter Manual, @pushshift and Twitter / Tweetdeck itself...

gvision

GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily. https://user-images.githubusercontent.com/37483725/228700363-cc0d8131-4134-4f37-918e-1a342dd22b83.mp4 🤖 About Google...