#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended
codingo/nosqlmapAutomated NoSQL database enumeration and web application exploitation tool.
narasimha1997/fake-smsA simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.
tomnomnom/assetfinderFind domains and subdomains related to a given domain
wietze/hijacklibsProject for tracking publicly disclosed DLL Hijacking opportunities.
thalesgroup-cert/watcherAI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…
salesforce/jarmActive TLS server fingerprinting tool that sends crafted Client Hello packets to generate unique JARM hashes for identifying server configurations,…
sparkyniner/netryx-astra-v2-geolocation-toolThe world's most sophisticated street level image geolocation software
0xmaximus/galaxy-bugbounty-checklistTips and Tutorials for Bug Bounty and also Penetration Tests.
trickest/resolversThe most exhaustive list of reliable DNS resolvers.
gquere/pwn_jenkinsNotes about attacking Jenkins servers
4lbh4cker/alhackingAlbanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery,…
cisagov/vulnrichmentA repo to conduct vulnerability enrichment.
specterops/sharphoundCollects Active Directory object metadata, group memberships, sessions, ACLs, and trusts to feed BloodHound attack-path mapping for security…
649/memcrashed-ddos-exploitDDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
0xn0ne/weblogicscannerweblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-20…
spyboy-productions/cloakquest3rOpen-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
davidbuchanan314/tweetable-polyglot-pngPack up to 3MB of data into a tweetable PNG polyglot file.
ihebski/a-red-teamer-diariesRedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
