WEBFANG

WEBFANG v2.0 Disclaimer: Webfang is a CLI developed and engineered as a Reconnaissance toolkit for ethical hackers, blue teamers, and red teamers. It performs passive and active reconnaissance using spidering, Subdomain Scanning, WHOIS, DNS, Shodan, and header fingerprinting. WEBFANG is intended...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

vhostawesome

FunWithVhosts A tool designed to efficiently check for virtual hosts across multiple IP addresses. Description FunWithVhosts automates the process of identifying virtual hosts on given IP addresses. The script checks for open ports, specifically web server ports, and then tries to retrieve conten...

infoooze

Infoooze Report Bug · Request Feature Table of Content 1. About Infoooze Features Support 2. Getting Started Prerequisites Installation on Linux Installation on Android Uninstall 3. Usage Options Examples 4. Run in Gitpod 5. Contributing 6. License 7. Contact About Infoooze Infoooze is a powerful...

PentestBro

Description Experimental tool for Windows. PentestBro combines subdomain scans, whois, port scanning, banner grabbing and web enumeration into one tool. Uses subdomain list of SecLists. Uses nmap service probes for banner grabbing. Uses list of paths for web enumeration. Example scan of...

Spartan

Spartan Recon Like a Pro Wiki • Usage • Gallery Features Subdomain Scan Using Aquatone & Sublist3r Httprob for only Live sites Masscan for open ports Identifing CMS using CMSeeK Grabing URL's from waybackMachine ScreenShot using Aquatone Brute forcing directories and files using Dirsearch Cors Sc...

dark-fantasy-hack-tool

DARK FANTASY HACK TOOL Written by @ritvikb99 and @CodesWhite and @meuzgebre Requirements file idea given by @Swastik2561 For security purposes only ! Installation: root@kitploit: $ pipenv install or: root@kitploit: $ pip3 install -r requirements.txt Features: DOS Tool: To take down small websites...

hakrawler

Hakrawler 用于收集URL和JavaScript文件位置的高速Go语言网络爬虫。这基本上是优秀的Gocolly库的一个简单实现。 使用示例 单个URL： root@kitploit: echo https://google.com | hakrawler 多个URL： root@kitploit: cat urls.txt | hakrawler 每行标准输入的超时时间设为5秒： root@kitploit: cat urls.txt | hakrawler -timeout 5 通过代理发送所有请求： root@kitploit: cat urls.txt | hakrawle...

apidetector

APIDetector は、さまざまなサブドメインで公開された Swagger エンドポイントをテストするために設計された、強力かつ効率的なツールです。誤検知を検出する独自のスマート機能を備えており、API テストや脆弱性スキャンに携わるセキュリティ専門家や開発者にとって特に有用です。 BlackHat Arsenal 2024 で発表 Link バージョン履歴 バージョン 3 の新機能 最新 最新の Web インターフェース : 使いやすいインターフェースで API エンドポイントのスキャンが簡単に リアルタイム結果 : 発見されたエンドポイントや脆弱性のライブ更新...

citrixvulncheck

citrixvulncheck A script to look for CVE-2019-19781 Vulnerability within a domain and it's subdomains...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...

virustotalx

virustotalx 用于端点 virustotalx 用于 IP（V2） 安装 root@kitploit: git clone https://github.com/orwagodfather/virustotalx.git root@kitploit: cd virustotalx 创建 3 个账户 https://www.virustotal.com/gui/join-us 并复制 3 个 API 密钥 === root@kitploit: nano orwa.sh & root@kitploit: nano orwaV2.sh 在此处粘贴 3 个 API 密钥...

knockbleed

knockbleed CVE-2014-0160 mass test against subdomains Requirement: Knock Subdomain Scan by Gianni 'guelfoweb' Amato - https://github.com/guelfoweb/knock check-ssl-heartbleed by Steffen Ullrich - https://github.com/noxxi/p5-scripts perl python Usage: root@kitploit: sid@sweethome:$ ./knockbleed.sh...

Scanners-Box

This is a collection of open-source scanners from the GitHub platform, including subdomain enumeration, database vulnerability scanners, weak password or information leak scanners, port scanners, fingerprint scanners, and other large-scale scanners. The collection is maintained by We5ter and...

CloakQuest3r - Uncover The True IP Address Of Websites Safeguarded By Cloudflare

CloakQuest3r is a powerful Python tool meticulously crafted to uncover the true IP address of websites safeguarded by Cloudflare, a widely adopted web security and performance enhancement service. Its core mission is to accurately discern the actual IP address of web servers that are concealed...

Scanners-Box

This is a collection of open-source scanning tools, referred to as "Scanners Box" or "scanbox," maintained by the user "We5ter" on GitHub. The repository contains various tools for scanning and testing different aspects of a system or network, including subdomain enumeration, database vulnerabili...

Osmedeus - Automatic Reconnaisance And Scanning In Penetration Testing

Automatic Reconnaisance and Scanning in Penetration Testing What is Osmedeus? Osmedeus allow you to doing boring stuff in Pentesting automatically like reconnaissance and scanning the target by run the collection of awesome tools. Installation git clone https://github.com/j3ssie/Osmedeus cd...

Fuxi-Scanner

This is an open-source network security vulnerability scanner called Fuxi-Scanner. It is a Python-based tool that provides multiple security functions, including vulnerability detection and management, authentication testing, IT asset discovery and management, port scanning, subdomain scanning, a...