Technical Devang
Ir al canal en Telegram
Sin datos
Suscriptores
Sin datos24 horas
+37 días
-430 días
Archivo de publicaciones
THE ART OF WEB RECONNAISSANCE BUG BOUNTY ETHICAL HACKING COURSE
https://mega.nz/folder/Qn5CibIC#JRmgMNgy9BqjrVNBq6VyUQ
Tool for OSINT: 🔍 Searching people's digital footprint and leaked passwords across various social networks, written in Go.
https://github.com/ibnaleem/gosearch
Grabbing target country domains by Subfinder.
Link Download:
https://github.com/projectdiscovery/subfinder/releases/download/v2.6.7/subfinder_2.6.7_windows_arm64.zip
Awesome AI Web Search
List of open source and proprietary web search tools
https://github.com/felladrin/awesome-ai-web-search
URLFinder
URLFinder is a high-speed, passive URL discovery tool designed to simplify and accelerate web asset discovery, ideal for penetration testers, security researchers, and developers looking to gather URLs without active scanning.
— Passive source discovery
— JSON/file/stdout output
— Optimized speed & efficiency
https://github.com/projectdiscovery/urlfinder
ODIN
IP search engine.
Search by ip, domain name, ASN, geolocation, BGP prefix, ASN number, WHOIS updated date and other parameters.
search.odin.io
GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487).
https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass
100 Hacking Tools and Resources
https://www.hackerone.com/ethical-hacker/100-hacking-tools-and-resources
🎣 Top 13 Public Phishing Tools in 2024
🔹 1. Phishing Frenzy: github.com/pentestgeek/phishing-frenzy 🎉
🔹 2. Ghost Phisher: github.com/savio-code/ghost-phisher 👻
🔹 3. King Phisher: github.com/rsmusllp/king-phisher 👑
🔹 4. WiFiPhisher: github.com/wifiphisher/wifiphisher 📶
🔹 5. GoPhish: github.com/gophish/gophish 🚀
🔹 6. Zphisher: github.com/htr-tech/zphisher ⚡
🔹 7. BlackPhish: github.com/iinc0gnit0/BlackPhish 🖤
🔹 8. OhMyQR: github.com/cryptedwolf/ohmyqr 🤳
🔹 9. SayCheese: github.com/hangetzzu/saycheese 📸
🔹 10. I-See-You: github.com/Viralmaniar/I-See-You 👀
🔹 11. Social Engineer Toolkit (SET): github.com/trustedsec/social-engineer-toolkit 🛠️
🔹 12. Evilginx: github.com/kgretzky/evilginx 😈
🔹 13. SocialFish: github.com/UndeadSec/SocialFish 🐟
Google advanced video search
When you search for videos on search engines, don't forget that there, as on and YouTube, there are advanced search filters. For example, #Google has filters for language, duration, subtitles, and domain.
https://www.google.com/advanced_video_search
MEMERY
Very easy to install and use #python tool (with GUI) for text search of images in a local directory on your computer or server.
https://github.com/deepfates/memery
Finding Email Addresses without Paywalls
Every Pentester or Red Teamer has likely encountered situations where they need to perform User Enumeration or Password Spraying, but where can you find a list of valid users? Snov.io, Hunter.io, and Phonebook.cz no longer provide easy access to email lists and instead hit you with a paywall.
Here’s the solution — Prospeo! Just log in with Google SSO, enter the target domain, and get a list of email addresses with no strings attached.
superbolt.web.app
A new tool from GrayLark allows to geolocate a photo by very small details (a window corner, a trash can, a bush on the sidewalk, etc.).
So far only works for San Francisco, but many other cities are ahead.
Telegram Scraper
- scrape messages from multiple channels
- download media files
- export data to JSON/CSV formats
- SQLite database storage
https://github.com/unnohwn/telegram-scraper
From HTTP to RCE - How to leave backdoor in IIS.
https://cicada-8.medium.com/from-http-to-rce-how-to-leave-backdoor-in-iis-cbef8249eba9
Obsidian Web Clipper
New extension that helps you highlight and capture the web in your browser. Anything you save is stored as durable Markdown files that you can read offline, and preserve for the long term.
Source:
https://obsidian.md/clipper
