s3enum

s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation go install github.com/koenrh/s3enum@latest Usage You nee...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: $ printf example.com | gau $ cat domains.tx...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr, ip range or...

f5_scanner

f5scanner Scanner de masse F5 et vérificateur CVE-2020-5902 Cet outil est un scanner de masse avec 30 threads codés en dur, à utiliser avec prudence Comment configurer $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt Comment exécuter IP unique python3...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

CWFF

CWFF - Listes de mots personnalisées pour le fuzzing CWFF est un outil qui crée une liste de mots spéciale et de haute qualité pour le fuzzing / la découverte de contenu, à la vitesse la plus élevée possible en utilisant la concurrence, et il est fortement inspiré par la présentation Who, What,...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

httpx

Features • Installation • Usage • Documentation • Notes • Join Discord httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. It is designed to maintain result reliability with an increased number of threads. Features Simple and modular...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

CVE-2024-4956

CVE-2024-4956 Toutes les informations sont fournies à titre informatif uniquement. python3 CVE-2024-4956-threads.py - targetstextfile - outputtextfile nuclei -t nucleiactive.yaml -l targets.txt nuclei -t nucleipassive.yaml -l targets.txt -json-export output.json; puis analyser de n'importe quelle...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

Fiber

Description Une fibre est une unité d'exécution qui doit être planifiée manuellement par l'application plutôt que de se reposer sur le mécanisme de planification basé sur les priorités intégré à Windows. Les fibres sont souvent appelées threads légers. Pour des informations plus détaillées sur ce...

http-mcp-bridge

HTTP MCP Bridge Этот проект реализует HTTP-сервер, который выступает в роли моста между HTTP/1.1-запросами и удалённым MCP-сервером, используя Python-библиотеку mcp GitHub. Основная цель этой инициативы — дать возможность использовать HTTP-инструменты безопасности для тестирования удалённых...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...

CallStackMasker

CallStackMasker Этот репозиторий демонстрирует PoC-технику для динамической подмены стеков вызовов с помощью таймеров. Перед засыпанием нашего импланта мы можем поставить в очередь таймеры, чтобы перезаписать его стек вызовов поддельным, а затем восстановить исходный стек перед возобновлением...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

Hunt-Weird-ImageLoads

Hunt-Weird-ImageLoads Этот проект создан для изучения различных IOC, вызываемых событиями Imageload. Он использует ETW для мониторинга событий ImageLoad и анализирует стек вызовов для выявления возможных IOC, таких как: RWX страница в стеке вызовов Затёртый stomped модуль в стеке вызовов...

Q-DDOS-GUI

Q-DDOS-GUI DDOS ÉCRIT EN C TCP/HTTP/HTTPS ddos écrit en c . Attaque sur les protocoles tcp, http et https. Attaque avec ddos en choisissant un TIMEOUT aléatoire dans une plage de secondes ou avec un Timeout défini. Sélectionnez le nombre de threads que vous souhaitez utiliser. cochez la case "sto...