vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms https://github.com/anouarbensaad/vulnx/archive/master.zip VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities...

cve-exploit

CVE-EXPLOIT Use this software only for legal purposes. I am in no way responsible for your actions. Use python 3.11.2 Made by Edu0x01 DESCRIPTION cve-exploit is a hub for finding CVEs and exploits. It is based on the official NIST, ExploitDB and Github databases. The tool makes it quick and easy ...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

pecli

PEcli Tool to analyze PE files in python 3. Current features : Show information about the file import, exports, resources Search for interesting information in the file abnormal resources, peid... Dump sections or resources Check size Search for a string in the file Installation You can install i...

EagleEye

$$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$ |$$$$$$$ |$$...

Emora-Project

Emora Emora is an OSINT tool that allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results. Overview Overview Showcase Installation Using binary...

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

FireShodanMap

FireShodanMap FireShodanMap is a Realtime map that integrates Firebase and Shodan. A search is carried out using Shodan searching vulnerable devices and they are showed on the map for analysis. All data updated in Firebase are Realtime. Changes We have a file named "fireshodan.py" responsible for...

Pinkerton

🕵️ Pinkerton Investigating JavaScript files since 1850 Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded passwords, or related data. ⚡ Getting started A quick guide on how to install and use Pinkerton. 1. Clone the repository with:...

HellRaiser

HellRaiser Vulnerability Scanner Install HellRaiser depends on cve-search API. Have a cve-search API running and add the address in config/config.yml on cvesearchapidomain field. Install ruby 2.7.2, bundler 1.17.3 and rails. https://gorails.com/setup/ubuntu/20.04 Install redis-server and nmap. su...

geowifi

📡💘🌎 | geowifi Search WiFi geolocation data by BSSID and SSID on different public databases. 💾 Databases Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌ DiscontinuedOpenWifi ✔️Prerequisites Python3. In order to display emojis on Windows , it is recommended to...

Passhunt

Passhunt Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords. Screenshot Pre-requisites Make sure you have installed the following: - Python 3.0 or later. - pip3 sudo apt-get...

Ominis-OSINT

Ominis-OSINT: Web Hunter 🌐🕵️‍♂️ SURPRISE UPDATE SCHEDULED FOR DEVELOPMENT RESCHEDULED. WINTERGATE WILL BE EXPANDING THIS PROJECT Github Actions Visit actions/workflows and chose any of the 3 options to try out Ominis OSINT right from github! Web Search :...

WhatBreach

WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...

Searpy

🥀 Searpy 🔧 Batch search tool, can be used for collection and traceability Supports py2 and py3 1. Install git clone https://github.com/j3ers3/Searpy pip install -r requirements.txt Configure API and account in ./config.py python Searpy -h 2. Help Searpy Engine Tookit optional arguments: -h,...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...

shodan-eye

Shodan Eye This tool collects all information about all devices that are directly connected to the internet with the specified keywords that you enter. This way, you get a complete overview. Here you can read the latest article about Shodan Eye:...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

CVE-2020-18324

Subrion CMS 4.2.1 – Reflected XSS vulnerability in Kickstart template Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-sized or large sites. The Reflected Cross-site...

Cr3dOv3r

Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with the most useful details about the leak Using haveibeenpwned API and tries to get the plain text password...