HackGit

​​SDomDiscover A easy-to-use python tool to perform dns recon with multiple options https://github.com/D3Ext/SDomDiscover

​​subfinder Считается потомком sublist3r — утилита тоже собирает информацию о поддоменах, используя множество пассивных онлайновых источников, таких как Baidu, Bing, Censys. Для некоторых источников потребуется внести ключи от API в файл конфигурации "$HOME/.config/subfinder/config.yaml" SubLnder имеет удобную модульную архитектуру и написан на Go, так что очень быстро работает. https://github.com/projectdiscovery/subfinder #soft #infosec #subdomain #web

​​PwnFox A Firefox/Burp extension that provide usefull tools for your security audit. https://github.com/yeswehack/PwnFox

​​s1c0n simple recon tool to help you searching vulnerability on web server. maybe xD Features: ▫️ Auto scan WAF ▫️ Auto scan port ▫️ Auto scan subdomain ▫️ Auto scan dir on web server https://github.com/root-x-krypt0n-x/s1c0n

​​DFShell The Best Forwarded Shell. D3Ext's Forwarded Shell it's a python3 script which use mkfifo to simulate a shell into the victim machine. It creates a hidden directory in /dev/shm/.fs/ and there are stored the created fifos. You can even have a tty over a webshell. https://github.com/D3Ext/DFShell

sniffer A modern alternative network traffic sniffer inspired by bandwhich (Rust) and nethogs (C++). sniffer is designed for network troubleshooting. It can be started at any time to analyze the processes or connections causing increases in network traffic without loading any kernel modules. By the way, the TUI of it is responsive that can fit with terminals of all sizes automatically. https://github.com/chenjiandongx/sniffer #network #sniffer

​​wodat Windows Oracle Database Attack Tool Simple port of the popular Oracle Database Attack Tool (ODAT) to C# .Net Framework. Credit to as lots of the functionality are ported from his code. ▫️ Perform password based attacks e.g. username as password, username list against given password, password list against given username, username:pass combolist. ▫️ Test if a credential/connection string is working against target ▫️ Brute force attacks to discover valid SID/ServiceNames ▫️ More to come I hope! https://github.com/InitRoot/wodat

​​Comrad Comrad is a socialist network: encrypted, insurveillable, unmontizeable, and self-governing. Meet fellow comrades and message them securely, organize safely into self-moderated groups, plan demonstrations secretly and spontaneously – and help fight back against the police state and surveillance capitalism, both online and off. https://github.com/ComradOrg/Comrad

hacktronian Pentesing Tools That All Hacker Needs. Menu: ▫️ Information Gathering ▫️ Password Attacks ▫️ Wireless Testing ▫️ Exploitation Tools ▫️ Sniffing & Spoofing ▫️ Web Hacking ▫️ Private Web Hacking ▫️ Post Exploitation ▫️ Install The HACKTRONIAN https://github.com/thehackingsage/hacktronian

Azure_Workshop #Azure #RedTeam Attack and Detect Workshop This is a vulnerable-by-design Azure lab, containing 2 x attack paths with common misconfigurations. If you would like to see what alerts your attack path vectors are causing, recommend signing up for a Microsoft E5 trial which has Microsoft Defender for Cloud as well as Azure AD premium P2 plan. Links for signing up to an Azure Developer account can be found in the resources.txt file. Each kill-chain has in its folder the Terraform script (and other pre-reqs files needed for deployment) as well as the solutions to the challenges. https://github.com/mandiant/Azure_Workshop

FZF A command-line fuzzy finder. It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc. Advantages: ▫️ Portable, no dependencies ▫️ Blazingly fast ▫️ The most comprehensive feature set ▫️ Flexible layout ▫️ Batteries included https://github.com/junegunn/fzf

​​MagicRecon Powerful shell script to maximize the #recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats. With Magic Recon you can perform passive and active reconnaissance, vulnerability analysis, subdomain scan and many more! https://github.com/robotshell/magicRecon

​​DSTIKE WiFI Deauther MiNi Deauther MiNi is still an ESP8266 development board,It comes installed with the latest ESP8266 Deauther software. With this software, you can perform different attacks to test WiFi networks. Please note that the ESP8266 does only support 2.4GHz.You can also use it to develop your own software. It is simple to use, just like any other ESP8266 development board. Function: ▫️ Deauther Attack: Disconnect 2.4G WiFi ▫️ Deauther Beacon: Create fake networks ▫️ Deauther Probe：Confuse wifi trackers ▫️ Packet Monitor：Display wifi traffic Deauther or Jammer: What's the difference? https://www.youtube.com/watch?v=gOyfD44A7rE Buy online: 🛒 https://ali.ski/PItT3 #wifi #dstike #esp8266

​​Prowler Security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks https://github.com/prowler-cloud/prowler

​​PPLDump RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows. https://github.com/last-byte/RIPPL #ad #ppl #lsass #tools

​​ꓘamerka GUI Ultimate Internet of Things/Industrial Control Systems reconnaissance tool. Features: ▫️ More than 100 ICS devices ▫️ Gallery section shows every gathered screenshot in one place ▫️ Interactive Google maps ▫️ Google street view support ▫️ Possibility to implement own exploits or scanning techiques ▫️ Support for NMAP scan in xml format as an input ▫️ Find the route and change location of device ▫️ Statistics for each search ▫️ Search Flick photos nearby your device ▫️ Position for vessels is scraped from device directly, rather than IP based ▫️ Some devices return hints or location in the response. It's parsed and displayed as an indicator that helps to geolocate device. https://github.com/woj-ciech/Kamerka-GUI

​​SubScraper Fast subdomain enumeration tool that uses a variety of techniques to find subdomains of a given target. Subdomain enumeration is especially helpful during penetration testing and bug bounty hunting to uncover an organization's attack surface. Depending on the CMD arguments applied, SubScraper can resolve DNS names, request HTTP(S) information, and perform CNAME lookups for takeover opportunities during the enumeration process. This can help identify next steps and discover patterns for exploitation. Key Features: ▫️ Modular design makes it easy to add new techniques/sources. ▫️ Various levels of enumeration for additional data gathering. ▫️ Allows for multiple target inputs or read targets from .txt file. ▫️ Windows CLI compatibility. ▫️ Generate output files in .txt or .csv format. https://github.com/m8sec/subscraper #web #subdomain

CamPhish Grab cam shots from target's phone front camera or PC webcam just sending a link. CamPhish is techniques to take cam shots of target's phone fornt camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & serveo to generate a link which we will forward to the target, which can be used on over internet. website asks for camera permission and if the target allows it, this tool grab camshots of target's device. https://github.com/techchipnet/CamPhish

Project V Project V is a set of network tools that helps you to build your own computer network. It secures your network connections and thus protects your privacy. https://github.com/v2fly/v2ray-core

​​CrossLinked LinkedIn enumeration tool that uses search engine scraping to collect valid employee names from a target organization. This technique provides accurate results without the use of API keys, credentials, or even accessing the site directly. Formats can then be applied in the command line arguments to turn these names into email addresses, domain accounts, and more. https://github.com/m8sec/CrossLinked