chomtesh

CHOMTE.SH Be sure to :star: this repo so you can keep up to date on any daily progress! CHOMTE.SH is a versatile framework designed for automating reconnaissance tasks in penetration testing. It's useful for bug bounty hunters and penetration testers in both internal and external network...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

AnalyticsRelationships

AnalyticsRelationships This script try to get related domains / subdomains by looking at Google Analytics IDs from a URL. First search for ID of Google Analytics in the webpage and then request to builtwith and hackertarget with the ID. Note : It does not work with all websites. It is searched by...

PentestBro

Description Experimental tool for Windows. PentestBro combines subdomain scans, whois, port scanning, banner grabbing and web enumeration into one tool. Uses subdomain list of SecLists. Uses nmap service probes for banner grabbing. Uses list of paths for web enumeration. Example scan of...

scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ - DNS / Subdomains / Ports / Directories enumeration Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install scilla Snap root@kitploit: sudo snap...

CloudFail

CloudFail CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases. 1. Misconfigured DNS...

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...

theHarvester

About theHarvester is a simple to use, yet powerful tool designed to be used during the reconnaissance stage of a red team assessment or penetration test. It performs open source intelligence OSINT gathering to help determine a domain's external threat landscape. The tool gathers names, emails,...

web-scanner

🌐 Web Scanner Tool 🌐 Developed by tmrswrr Version 1.0.0 A comprehensive tool for Web Domain Scanning including Subdomain Discovery, Directory Enumeration, Network Scanning, and Website Identification. 📷 Screenshots 📷 👇 💫 How to Use 💫 👇 📒 Read Me 📒 The Advanced Web Scanner is a versatile...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...

dnsReaper

DNS Reaper DNS Reaper is yet another sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one with over 50 takeover signatures. This means most organisations can scan their entire D...

omnisci3nt

⭐️ Si encuentras útil este repositorio de GitHub, ¡por favor considera darle una estrella! ⭐️ 🕵️‍♂️ Omnisci3nt: Kit de Reconocimiento Web Unificado Omnisci3nt es un marco integral de reconocimiento e inteligencia web diseñado para profesionales de ciberseguridad, hackers éticos e investigadores de...

skanuvaty

Skanuvaty Dangerously fast dns/network/port scanner, all-in-one. Start with a domain, and we'll find everything about it. Features: Finds subdomains from root domain Finds IPs for subdomains Checks what ports are open on those IPs Notice: not yet implemented Outputs a handy .json file with all th...

frogy2.0

Orbis - Inteligencia de Superficie de Ataque Inteligencia de Superficie de Ataque de Espectro Completo Orbis mapea automáticamente toda la superficie de ataque orientada a internet de su organización, subdominios, puertos abiertos, aplicaciones web, infraestructura en la nube, certificados TLS,...

SubDomainizer

Buy Me A Coffee SubDomainizer SubDomainizer is a tool designed to find hidden subdomains and secrets present is either webpage, Github, and external javascripts present in the given URL. This tool also finds S3 buckets, cloudfront URL's and more from those JS files which could be interesting like...

Rock-ON

Rock-ON A One-Shoot Killer Rock-On is a all in one recon tool that will help your Recon process give a boost. It is mainley aimed to automate the whole process of recon and save the time that is being wasted in doing all this stuffs manually. A thorough blog will be up in sometime. Stay tuned for...

getsubdomain

getsubdomain Get subdomain list and check whether they are active or not by each response code. Using API by c99.nl Installation root@kitploit: ▶ go install github.com/abaykan/getsubdomain@latest Put your APIKEY in /.config/c99.txt: root@kitploit: ▶ echo "" /.config/c99.txt Usage Single Domain...

Spartan

Spartan Recon Like a Pro Wiki • Usage • Gallery Features Subdomain Scan Using Aquatone & Sublist3r Httprob for only Live sites Masscan for open ports Identifing CMS using CMSeeK Grabing URL's from waybackMachine ScreenShot using Aquatone Brute forcing directories and files using Dirsearch Cors Sc...

Reconator

Reconator is an automated reconnaissance framework. Add a target — alone or in bulk — and the worker runs 17 recon modules against it subdomain enum, dirbrute, JS/link mining, WAF fingerprint, takeover check, GF triage, and more. The dashboard shows per-module output as it lands. Stack Layer| Tec...

WEBFANG

WEBFANG v2.0 Disclaimer: Webfang is a CLI developed and engineered as a Reconnaissance toolkit for ethical hackers, blue teamers, and red teamers. It performs passive and active reconnaissance using spidering, Subdomain Scanning, WHOIS, DNS, Shodan, and header fingerprinting. WEBFANG is intended...