{"id":599745,"date":"2023-01-21T06:49:29","date_gmt":"2023-01-21T12:49:29","guid":{"rendered":"https:\/\/news.sellorbuyhomefast.com\/index.php\/2023\/01\/21\/offsec-tools-a-vast-collection-of-security-tools\/"},"modified":"2023-01-21T06:49:29","modified_gmt":"2023-01-21T12:49:29","slug":"offsec-tools-a-vast-collection-of-security-tools","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2023\/01\/21\/offsec-tools-a-vast-collection-of-security-tools\/","title":{"rendered":"Offsec.tools \u2013 A vast collection of security tools"},"content":{"rendered":"
\n
\n

\"0d1n<\/p>\n

\n
0d1n<\/a><\/h6>\n

Tool for automating customized attacks against web applications.<\/p>\n<\/div><\/div>\n

\n

\"2tearsinabucket<\/p>\n<\/p><\/div>\n

\n

\"4-ZERO-3<\/p>\n<\/p><\/div>\n

\n

\"ActiveScan++<\/p>\n

\n
ActiveScan++<\/a><\/h6>\n

Extends Burp Suite’s active and passive scanning capabilities.<\/p>\n<\/div><\/div>\n

\n

\"Acunetix<\/p>\n

\n
Acunetix<\/a><\/h6>\n

Quickly find and fix the vulnerabilities that put your web applications at risk of attack.<\/p>\n<\/div><\/div>\n

\n

\"ADAPE<\/p>\n

\n
ADAPE Script<\/a><\/h6>\n

Active Directory assessment and privilege escalation script.<\/p>\n<\/div><\/div>\n

\n

\"ADenum<\/p>\n

\n
ADenum<\/a><\/h6>\n

Find misconfiguration through LDAP to exploit weaknesses with Kerberos.<\/p>\n<\/div><\/div>\n

\n

\"ADReaper<\/p>\n

\n
ADReaper<\/a><\/h6>\n

Enumerate an Active Directory environment with LDAP queries.<\/p>\n<\/div><\/div>\n

\n

\"ADRT<\/p>\n

\n
ADRT<\/a><\/h6>\n

Active Directory Report Tool.<\/p>\n<\/div><\/div>\n

\n

\"airbash<\/p>\n

\n
airbash<\/a><\/h6>\n

Fully automated WPA PSK PMKID and handshake capture script.<\/p>\n<\/div><\/div>\n

\n

\"aircrack-ng<\/p>\n

\n
aircrack-ng<\/a><\/h6>\n

Complete suite of tools to assess WiFi network security.<\/p>\n<\/div><\/div>\n

\n

\"AllAboutBugBounty<\/p>\n<\/p><\/div>\n

\n

\"Altdns<\/p>\n

\n
Altdns<\/a><\/h6>\n

Generates permutations, alterations and mutations of subdomains and then resolves them.<\/p>\n<\/div><\/div>\n

\n

\"Amass<\/p>\n

\n
Amass<\/a><\/h6>\n

In-depth Attack Surface Mapping and Asset Discovery.<\/p>\n<\/div><\/div>\n

\n

\"andor<\/p>\n

\n
andor<\/a><\/h6>\n

Blind SQL Injection Tool with Golang.<\/p>\n<\/div><\/div>\n

\n

\"Angry<\/p>\n

\n
Angry IP Scanner<\/a><\/h6>\n

Fast and simple-to-use open-source\/cross-platform network scanner.<\/p>\n<\/div><\/div>\n

\n

\"APKEnum<\/p>\n

\n
APKEnum<\/a><\/h6>\n

Passive enumeration utility For Android applications.<\/p>\n<\/div><\/div>\n

\n

\"apkurlgrep<\/p>\n<\/p><\/div>\n

\n

\"Aquatone<\/p>\n<\/p><\/div>\n

\n

\"Arachni<\/p>\n

\n
Arachni<\/a><\/h6>\n

Web Application Security Scanner Framework.<\/p>\n<\/div><\/div>\n

\n

\"archaeologit<\/p>\n

\n
archaeologit<\/a><\/h6>\n

Scans the history of GitHub repositories to find sensitive things.<\/p>\n<\/div><\/div>\n

\n

\"Arjun<\/p>\n

\n
Arjun<\/a><\/h6>\n

HTTP parameter discovery suite.<\/p>\n<\/div><\/div>\n

\n

\"As3nt<\/p>\n

\n
As3nt<\/a><\/h6>\n

Another Subdomain ENumeration Tool.<\/p>\n<\/div><\/div>\n

\n

\"ASNLookup<\/p>\n

\n
ASNLookup<\/a><\/h6>\n

Leverage ASN to look up IP addresses owned by a specific organization.<\/p>\n<\/div><\/div>\n

\n

\"ASNmap<\/p>\n

\n
ASNmap<\/a><\/h6>\n

Quickly maps organization network ranges using ASN information.<\/p>\n<\/div><\/div>\n

\n

\"assetfinder<\/p>\n

\n
assetfinder<\/a><\/h6>\n

Find domains and subdomains related to a given domain.<\/p>\n<\/div><\/div>\n

\n

\"Async<\/p>\n<\/p><\/div>\n

\n

\"ATOR<\/p>\n

\n
ATOR<\/a><\/h6>\n

Authentication Token Obtain and Replace Extender.<\/p>\n<\/div><\/div>\n

\n

\"AttackSurfaceMapper<\/p>\n

\n
AttackSurfaceMapper<\/a><\/h6>\n

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.<\/p>\n<\/div><\/div>\n

\n

\"Auth<\/p>\n

\n
Auth Analyzer<\/a><\/h6>\n

The Burp extension helps you to find authorization bugs.<\/p>\n<\/div><\/div>\n

\n

\"AuthMatrix<\/p>\n

\n
AuthMatrix<\/a><\/h6>\n

Provides a simple way to test authorization in web applications and web services.<\/p>\n<\/div><\/div>\n

\n

\"authz<\/p>\n

\n
authz<\/a><\/h6>\n

Burp Suite plugin to test for authorization flaws.<\/p>\n<\/div><\/div>\n

\n

\"AutoRecon<\/p>\n

\n
AutoRecon<\/a><\/h6>\n

Multi-threaded network reconnaissance tool which performs automated enumeration of services.<\/p>\n<\/div><\/div>\n

\n

\"AutoRepeater<\/p>\n

\n
AutoRepeater<\/a><\/h6>\n

Automated HTTP Request Repeating With Burp Suite.<\/p>\n<\/div><\/div>\n

\n

\"Autorize<\/p>\n

\n
Autorize<\/a><\/h6>\n

Automatic authorization enforcement detection extension for Burp Suite.<\/p>\n<\/div><\/div>\n

\n

\"AutoSploit<\/p>\n<\/p><\/div>\n

\n

\"autoSubTakeover<\/p>\n

\n
autoSubTakeover<\/a><\/h6>\n

A tool used to check if a CNAME resolves to the scope address.<\/p>\n<\/div><\/div>\n

\n

\"Autowasp<\/p>\n

\n
Autowasp<\/a><\/h6>\n

A one-stop pentesting checklist and logger tool.<\/p>\n<\/div><\/div>\n

\n

\"Awesome<\/p>\n

\n
Awesome Bug Bounty<\/a><\/h6>\n

A comprehensive curated list of available Bug Bounty & disclosure programs and writeups.<\/p>\n<\/div><\/div>\n

\n

\"Awesome<\/p>\n<\/p><\/div>\n

\n

\"AWS<\/p>\n

\n
AWS Extender CLI<\/a><\/h6>\n

Command-line script to test cloud storage for common misconfiguration issues.<\/p>\n<\/div><\/div>\n

\n

\"AWS<\/p>\n

\n
AWS security checks<\/a><\/h6>\n

This Burp Suite provides additional Scanner checks for AWS security issues.<\/p>\n<\/div><\/div>\n

\n

\"AWSBucketDump<\/p>\n

\n
AWSBucketDump<\/a><\/h6>\n

Security Tool to Look For Interesting Files in S3 Buckets.<\/p>\n<\/div><\/div>\n

\n

\"B-XSSRF<\/p>\n

\n
B-XSSRF<\/a><\/h6>\n

Toolkit to detect and keep track on Blind XSS, XXE & SSRF.<\/p>\n<\/div><\/div>\n

\n

\"backslash-powered-scanner<\/p>\n<\/p><\/div>\n

\n

\"barq<\/p>\n

\n
barq<\/a><\/h6>\n

The AWS Cloud Post Exploitation framework!<\/p>\n<\/div><\/div>\n

\n

\"BeEF<\/p>\n

\n
BeEF<\/a><\/h6>\n

The Browser Exploitation Framework is a penetration testing tool that focuses on the web browser.<\/p>\n<\/div><\/div>\n

\n

\"BeRoot<\/p>\n

\n
BeRoot<\/a><\/h6>\n

Multiplaform privilege escalation project.<\/p>\n<\/div><\/div>\n

\n

\"bettercap<\/p>\n

\n
bettercap<\/a><\/h6>\n

The Swiss Army knife for WiFi, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.<\/p>\n<\/div><\/div>\n

\n

\"Betterscan<\/p>\n

\n
Betterscan<\/a><\/h6>\n

Code Scanning\/SAST\/static analysis\/linting using many tools\/scanners with one report.<\/p>\n<\/div><\/div>\n

\n

\"BFAC<\/p>\n

\n
BFAC<\/a><\/h6>\n

Check for backup artifacts that may disclose the web-application’s source code.<\/p>\n<\/div><\/div>\n

\n

\"BitBlinder<\/p>\n

\n
BitBlinder<\/a><\/h6>\n

Injects custom XSS payloads on every form\/request submitted to detect blind XSS.<\/p>\n<\/div><\/div>\n

\n

\"BlackWidow<\/p>\n

\n
BlackWidow<\/a><\/h6>\n

Web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.<\/p>\n<\/div><\/div>\n

\n

\"bounty-targets-data<\/p>\n

\n
bounty-targets-data<\/a><\/h6>\n

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.<\/p>\n<\/div><\/div>\n

\n

\"bountyplz<\/p>\n

\n
bountyplz<\/a><\/h6>\n

Automated security reporting from markdown templates.<\/p>\n<\/div><\/div>\n

\n

\"brutesubs<\/p>\n

\n
brutesubs<\/a><\/h6>\n

Automation framework for running multiple open sourced subdomain bruteforcing tools in parallel.<\/p>\n<\/div><\/div>\n

\n

\"BruteX<\/p>\n

\n
BruteX<\/a><\/h6>\n

Automatically brute force all services running on a target.<\/p>\n<\/div><\/div>\n

\n

\"BruteXSS<\/p>\n

\n
BruteXSS<\/a><\/h6>\n

Tool written in Python simply to find XSS vulnerabilities in web application.<\/p>\n<\/div><\/div>\n

\n

\"Bug<\/p>\n<\/p><\/div>\n

\n

\"Bug<\/p>\n<\/p><\/div>\n

\n

\"BugBountyHunter<\/p>\n<\/p><\/div>\n

\n

\"Bugcrowd<\/p>\n

\n
Bugcrowd VRT<\/a><\/h6>\n

Bugcrowd\u2019s baseline priority ratings for common security vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"Burp<\/p>\n<\/p><\/div>\n

\n

\"Burp<\/p>\n<\/p><\/div>\n

\n

\"Burp<\/p>\n

\n
Burp Suite<\/a><\/h6>\n

The class-leading vulnerability scanning, penetration testing, and web app security platform.<\/p>\n<\/div><\/div>\n

\n

\"Burp<\/p>\n

\n
Burp WP<\/a><\/h6>\n

Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.<\/p>\n<\/div><\/div>\n

\n

\"Burp-AnonymousCloud<\/p>\n

\n
Burp-AnonymousCloud<\/a><\/h6>\n

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"burp-exporter<\/p>\n

\n
burp-exporter<\/a><\/h6>\n

Copy a Burp Suite request to a file or the clipboard as multiple programming languages functions.<\/p>\n<\/div><\/div>\n

\n

\"Burp-to-SQLMap<\/p>\n

\n
Burp-to-SQLMap<\/a><\/h6>\n

Performing SQLInjection test on Burp Suite Bulk Requests using SQLMap.<\/p>\n<\/div><\/div>\n

\n

\"burp-vulners-scanner<\/p>\n<\/p><\/div>\n

\n

\"BurpBeautifier<\/p>\n

\n
BurpBeautifier<\/a><\/h6>\n

Burpsuite extension for beautifying request\/response body.<\/p>\n<\/div><\/div>\n

\n

\"BurpBounty<\/p>\n

\n
BurpBounty<\/a><\/h6>\n

Improve the active and passive Burp Suite scanner by means of custom rules through GUI.<\/p>\n<\/div><\/div>\n

\n

\"BurpJSLinkFinder<\/p>\n

\n
BurpJSLinkFinder<\/a><\/h6>\n

Burp Extension for a passive scanning JS files for endpoint links.<\/p>\n<\/div><\/div>\n

\n

\"BurpSentinel<\/p>\n

\n
BurpSentinel<\/a><\/h6>\n

GUI Burp Plugin to ease discovering of security holes in web applications.<\/p>\n<\/div><\/div>\n

\n

\"BurpSmartBuster<\/p>\n

\n
BurpSmartBuster<\/a><\/h6>\n

A Burp Suite content discovery plugin that add the smart into the Buster.<\/p>\n<\/div><\/div>\n

\n

\"BurpSuiteHTTPSmuggler<\/p>\n

\n
BurpSuiteHTTPSmuggler<\/a><\/h6>\n

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.<\/p>\n<\/div><\/div>\n

\n

\"bXSS<\/p>\n

\n
bXSS<\/a><\/h6>\n

bXSS is a utility which can be used identify Blind Cross-Site Scripting.<\/p>\n<\/div><\/div>\n

\n

\"bypasswaf<\/p>\n

\n
bypasswaf<\/a><\/h6>\n

Add headers to all Burp requests to bypass some WAF products.<\/p>\n<\/div><\/div>\n

\n

\"Can<\/p>\n<\/p><\/div>\n

\n

\"cariddi<\/p>\n

\n
cariddi<\/a><\/h6>\n

Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.<\/p>\n<\/div><\/div>\n

\n

\"cc.py<\/p>\n

\n
cc.py<\/a><\/h6>\n

Extracting URLs of a specific target based on the results of commoncrawl.org.<\/p>\n<\/div><\/div>\n

\n

\"Censys<\/p>\n

\n
Censys Enumeration<\/a><\/h6>\n

Extract subdomains\/emails for a given domain using SSL\/TLS certificate dataset on Censys.<\/p>\n<\/div><\/div>\n

\n

\"Censys<\/p>\n<\/p><\/div>\n

\n

\"cero<\/p>\n

\n
cero<\/a><\/h6>\n

Scrape domain names from SSL certificates of arbitrary hosts.<\/p>\n<\/div><\/div>\n

\n

\"CertCrunchy<\/p>\n

\n
CertCrunchy<\/a><\/h6>\n

Uses data from SSL Certificates to find potential host names.<\/p>\n<\/div><\/div>\n

\n

\"Certificate<\/p>\n<\/p><\/div>\n

\n

\"Certificate<\/p>\n<\/p><\/div>\n

\n

\"CeWL<\/p>\n

\n
CeWL<\/a><\/h6>\n

Custom Word List Generator.<\/p>\n<\/div><\/div>\n

\n

\"changeme<\/p>\n<\/p><\/div>\n

\n

\"Chaos<\/p>\n<\/p><\/div>\n

\n

\"ChopChop<\/p>\n

\n
ChopChop<\/a><\/h6>\n

Scan endpoints and identify exposition of sensitive services\/files\/folders.<\/p>\n<\/div><\/div>\n

\n

\"clairvoyance<\/p>\n

\n
clairvoyance<\/a><\/h6>\n

Obtain GraphQL API Schema even if the introspection is not enabled.<\/p>\n<\/div><\/div>\n

\n

\"cloud_enum<\/p>\n

\n
cloud_enum<\/a><\/h6>\n

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.<\/p>\n<\/div><\/div>\n

\n

\"CloudBrute<\/p>\n<\/p><\/div>\n

\n

\"CloudFail<\/p>\n

\n
CloudFail<\/a><\/h6>\n

Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.<\/p>\n<\/div><\/div>\n

\n

\"cloudflare-origin-ip<\/p>\n<\/p><\/div>\n

\n

\"Cloudfox<\/p>\n

\n
Cloudfox<\/a><\/h6>\n

Automating situational awareness for cloud penetration tests.<\/p>\n<\/div><\/div>\n

\n

\"cloudlist<\/p>\n

\n
cloudlist<\/a><\/h6>\n

Cloudlist is a tool for listing Assets from multiple Cloud Providers.<\/p>\n<\/div><\/div>\n

\n

\"CloudScraper<\/p>\n

\n
CloudScraper<\/a><\/h6>\n

Tool to enumerate targets in search of cloud resources.<\/p>\n<\/div><\/div>\n

\n

\"CMSmap<\/p>\n

\n
CMSmap<\/a><\/h6>\n

CMS scanner that automates the process of detecting security flaws of the most popular CMSs.<\/p>\n<\/div><\/div>\n

\n

\"cnames<\/p>\n

\n
cnames<\/a><\/h6>\n

Take a list of resolved subdomains and output any corresponding CNAMES en masse.<\/p>\n<\/div><\/div>\n

\n

\"Coercer<\/p>\n

\n
Coercer<\/a><\/h6>\n

Automatically coerce a Windows server to authenticate on an arbitrary machine.<\/p>\n<\/div><\/div>\n

\n

\"Collaborator<\/p>\n<\/p><\/div>\n

\n

\"commit-stream<\/p>\n

\n
commit-stream<\/a><\/h6>\n

OSINT tool for finding Github repositories by extracting commit logs in real time.<\/p>\n<\/div><\/div>\n

\n

\"Commix<\/p>\n

\n
Commix<\/a><\/h6>\n

Automated All-in-One OS Command Injection Exploitation Tool.<\/p>\n<\/div><\/div>\n

\n

\"cook<\/p>\n

\n
cook<\/a><\/h6>\n

Overpower wordlist generator, words permutation and combinations, encoding\/decoding…<\/p>\n<\/div><\/div>\n

\n

\"CORS<\/p>\n

\n
CORS Scanner<\/a><\/h6>\n

A multi-threaded scanner that helps identify CORS flaws\/misconfigurations.<\/p>\n<\/div><\/div>\n

\n

\"CorsMe<\/p>\n

\n
CorsMe<\/a><\/h6>\n

CORS misconfiguration scanner tool with speed and precision in mind!<\/p>\n<\/div><\/div>\n

\n

\"CORStest<\/p>\n

\n
CORStest<\/a><\/h6>\n

A simple CORS misconfiguration scanner.<\/p>\n<\/div><\/div>\n

\n

\"Corsy<\/p>\n

\n
Corsy<\/a><\/h6>\n

CORS Misconfiguration Scanner.<\/p>\n<\/div><\/div>\n

\n

\"Covenant<\/p>\n

\n
Covenant<\/a><\/h6>\n

Collaborative C2 framework for red teamers.<\/p>\n<\/div><\/div>\n

\n

\"Cr3dOv3r<\/p>\n

\n
Cr3dOv3r<\/a><\/h6>\n

Know the dangers of credential reuse attacks.<\/p>\n<\/div><\/div>\n

\n

\"Crawlergo<\/p>\n

\n
Crawlergo<\/a><\/h6>\n

A powerful browser crawler for web vulnerability scanners<\/p>\n<\/div><\/div>\n

\n

\"crawley<\/p>\n<\/p><\/div>\n

\n

\"crithit<\/p>\n

\n
crithit<\/a><\/h6>\n

Takes a single wordlist item and tests it one by one over a large collection of websites.<\/p>\n<\/div><\/div>\n

\n

\"CRLF-Injection-Scanner<\/p>\n<\/p><\/div>\n

\n

\"CRLFMap<\/p>\n

\n
CRLFMap<\/a><\/h6>\n

CRLFMap is a tool to find HTTP Splitting vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"CRLFsuite<\/p>\n

\n
CRLFsuite<\/a><\/h6>\n

The most powerful CRLF injection scanner.<\/p>\n<\/div><\/div>\n

\n

\"CRLFuzz<\/p>\n

\n
CRLFuzz<\/a><\/h6>\n

A fast tool to scan CRLF vulnerability written in Go.<\/p>\n<\/div><\/div>\n

\n

\"Cross-site<\/p>\n<\/p><\/div>\n

\n

\"crtndtry<\/p>\n<\/p><\/div>\n

\n

\"crunch<\/p>\n

\n
crunch<\/a><\/h6>\n

Wordlist generator where you can specify a character set or any set of characters to be used.<\/p>\n<\/div><\/div>\n

\n

\"csp-analyzer<\/p>\n<\/p><\/div>\n

\n

\"csprecon<\/p>\n

\n
csprecon<\/a><\/h6>\n

Discover new target domains using Content Security Policy.<\/p>\n<\/div><\/div>\n

\n

\"cstc<\/p>\n

\n
cstc<\/a><\/h6>\n

Burp Suite extension that allows request\/response modification using a GUI.<\/p>\n<\/div><\/div>\n

\n

\"ctf-tools<\/p>\n

\n
ctf-tools<\/a><\/h6>\n

Some setup scripts for security research tools.<\/p>\n<\/div><\/div>\n

\n

\"CTFR<\/p>\n

\n
CTFR<\/a><\/h6>\n

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.<\/p>\n<\/div><\/div>\n

\n

\"curate<\/p>\n

\n
curate<\/a><\/h6>\n

A tool for fetching archived URLs.<\/p>\n<\/div><\/div>\n

\n

\"DalFox<\/p>\n

\n
DalFox<\/a><\/h6>\n

Powerful open source XSS scanning tool and parameter analyzer, utility.<\/p>\n<\/div><\/div>\n

\n

\"Dangerous<\/p>\n

\n
Dangerous Methods<\/a><\/h6>\n

A Burp Suite extension for finding the use of potentially dangerous methods\/functions.<\/p>\n<\/div><\/div>\n

\n

\"Dastardly<\/p>\n

\n
Dastardly Scan Action<\/a><\/h6>\n

Runs a scan using Dastardly by Burp Suite against a target site and generates a report.<\/p>\n<\/div><\/div>\n

\n

\"DataExtractor<\/p>\n

\n
DataExtractor<\/a><\/h6>\n

A Burp Suite extension to extract data from source code while browsing.<\/p>\n<\/div><\/div>\n

\n

\"Default<\/p>\n<\/p><\/div>\n

\n

\"default-http-login-hunter<\/p>\n<\/p><\/div>\n

\n

\"DefaultPassword<\/p>\n<\/p><\/div>\n

\n

\"Demiguise<\/p>\n<\/p><\/div>\n

\n

\"DependencyCheck<\/p>\n

\n
DependencyCheck<\/a><\/h6>\n

Utility that detects publicly disclosed vulnerabilities in application dependencies.<\/p>\n<\/div><\/div>\n

\n

\"Depix<\/p>\n

\n
Depix<\/a><\/h6>\n

Recovers passwords from pixelized screenshots.<\/p>\n<\/div><\/div>\n

\n

\"detectify-cves<\/p>\n<\/p><\/div>\n

\n

\"differer<\/p>\n

\n
differer<\/a><\/h6>\n

differer finds how URLs are parsed by different languages in order to help bug hunters break filters.<\/p>\n<\/div><\/div>\n

\n

\"Dirb<\/p>\n<\/p><\/div>\n

\n

\"dirhunt<\/p>\n

\n
dirhunt<\/a><\/h6>\n

Find web directories without bruteforce.<\/p>\n<\/div><\/div>\n

\n

\"dirlstr<\/p>\n

\n
dirlstr<\/a><\/h6>\n

Finds Directory Listings or open S3 buckets from a list of URLs.<\/p>\n<\/div><\/div>\n

\n

\"dirsearch<\/p>\n<\/p><\/div>\n

\n

\"DirSearch<\/p>\n<\/p><\/div>\n

\n

\"Dirstalk<\/p>\n

\n
Dirstalk<\/a><\/h6>\n

Multi threaded application designed to brute force paths on web servers.<\/p>\n<\/div><\/div>\n

\n

\"Distribute<\/p>\n<\/p><\/div>\n

\n

\"dnscan<\/p>\n

\n
dnscan<\/a><\/h6>\n

Python wordlist-based DNS subdomain scanner.<\/p>\n<\/div><\/div>\n

\n

\"dnsenum<\/p>\n

\n
dnsenum<\/a><\/h6>\n

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.<\/p>\n<\/div><\/div>\n

\n

\"dnsgen<\/p>\n

\n
dnsgen<\/a><\/h6>\n

Generates combination of domain names from the provided input.<\/p>\n<\/div><\/div>\n

\n

\"DNSProbe<\/p>\n

\n
DNSProbe<\/a><\/h6>\n

Allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.<\/p>\n<\/div><\/div>\n

\n

\"dnsReaper<\/p>\n

\n
dnsReaper<\/a><\/h6>\n

Subdomain takeover tool for attackers, bug bounty hunters and the blue team!<\/p>\n<\/div><\/div>\n

\n

\"DNSRecon<\/p>\n<\/p><\/div>\n

\n

\"DNSTake<\/p>\n

\n
DNSTake<\/a><\/h6>\n

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.<\/p>\n<\/div><\/div>\n

\n

\"dnsX<\/p>\n

\n
dnsX<\/a><\/h6>\n

Fast and multi-purpose DNS toolkit designed for running DNS queries.<\/p>\n<\/div><\/div>\n

\n

\"docem<\/p>\n

\n
docem<\/a><\/h6>\n

Utility to embed XXE and XSS payloads in docx, odt, pptx…<\/p>\n<\/div><\/div>\n

\n

\"DOM<\/p>\n<\/p><\/div>\n

\n

\"DOM<\/p>\n

\n
DOM XSS Scanner<\/a><\/h6>\n

A tool to scan source code for DOM based XSS vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"dom-red<\/p>\n

\n
dom-red<\/a><\/h6>\n

Small script to check a list of domains against open redirect vulnerability.<\/p>\n<\/div><\/div>\n

\n

\"Domain<\/p>\n

\n
Domain Analyzer<\/a><\/h6>\n

Analyze the security of any domain by finding all the information possible. Made in python.<\/p>\n<\/div><\/div>\n

\n

\"Domain<\/p>\n

\n
Domain Hunter<\/a><\/h6>\n

Try to find all subdomains, similar-domains and related-domains of an organization.<\/p>\n<\/div><\/div>\n

\n

\"domained<\/p>\n

\n
domained<\/a><\/h6>\n

Multi Tool Subdomain Enumeration.<\/p>\n<\/div><\/div>\n

\n

\"DOMDig<\/p>\n

\n
DOMDig<\/a><\/h6>\n

DOM XSS scanner for Single Page Applications.<\/p>\n<\/div><\/div>\n

\n

\"DotDotPwn<\/p>\n<\/p><\/div>\n

\n

\"DotGit<\/p>\n

\n
DotGit<\/a><\/h6>\n

An extension for checking if .git is exposed in visited websites.<\/p>\n<\/div><\/div>\n

\n

\"DroneSploit<\/p>\n<\/p><\/div>\n

\n

\"Drupwn<\/p>\n

\n
Drupwn<\/a><\/h6>\n

Drupal enumeration & exploitation tool.<\/p>\n<\/div><\/div>\n

\n

\"dsieve<\/p>\n

\n
dsieve<\/a><\/h6>\n

Filter and enrich a list of subdomains by level.<\/p>\n<\/div><\/div>\n

\n

\"DTD<\/p>\n

\n
DTD Finder<\/a><\/h6>\n

List DTDs and generate XXE payloads using those local DTDs.<\/p>\n<\/div><\/div>\n

\n

\"dufflebag<\/p>\n

\n
dufflebag<\/a><\/h6>\n

Search exposed EBS volumes for secrets.<\/p>\n<\/div><\/div>\n

\n

\"DumpsterDiver<\/p>\n<\/p><\/div>\n

\n

\"dvcs-ripper<\/p>\n

\n
dvcs-ripper<\/a><\/h6>\n

Rip web accessible version control systems: svn, git…<\/p>\n<\/div><\/div>\n

\n

\"Eagle<\/p>\n

\n
Eagle<\/a><\/h6>\n

Vulnerability scanner for mass detection of web-based applications vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"EDD<\/p>\n

\n
EDD<\/a><\/h6>\n

Ultimate domain enumeration tool.<\/p>\n<\/div><\/div>\n

\n

\"eLdap-Ldap-Search-and-Filter<\/p>\n<\/p><\/div>\n

\n

\"EMBA<\/p>\n

\n
EMBA<\/a><\/h6>\n

The security analyzer for firmware of embedded devices.<\/p>\n<\/div><\/div>\n

\n

\"eos<\/p>\n

\n
eos<\/a><\/h6>\n

Enemies Of Symfony – debug mode Symfony looter.<\/p>\n<\/div><\/div>\n

\n

\"espionage<\/p>\n

\n
espionage<\/a><\/h6>\n

Collects informations related to domains whois, history, dns records and more.<\/p>\n<\/div><\/div>\n

\n

\"Evil<\/p>\n

\n
Evil SQL Client<\/a><\/h6>\n

Interactive .NET SQL console client with enhanced SQL Server discovery\/access\/exfiltration features.<\/p>\n<\/div><\/div>\n

\n

\"evil<\/p>\n

\n
evil SSDP<\/a><\/h6>\n

Spoof SSDP replies to phish for credentials and NetNTLM challenge\/response.<\/p>\n<\/div><\/div>\n

\n

\"exfilkit<\/p>\n

\n
exfilkit<\/a><\/h6>\n

Data exfiltration utility for testing detection capabilities.<\/p>\n<\/div><\/div>\n

\n

\"ExifTool<\/p>\n

\n
ExifTool<\/a><\/h6>\n

ExifTool meta information reader\/writer.<\/p>\n<\/div><\/div>\n

\n

\"Exploitalert<\/p>\n<\/p><\/div>\n

\n

\"Extended<\/p>\n

\n
Extended SSRF search<\/a><\/h6>\n

Smart SSRF scanner using different methods like parameter brute forcing in POST and GET.<\/p>\n<\/div><\/div>\n

\n

\"Extended<\/p>\n<\/p><\/div>\n

\n

\"extract-endpoints<\/p>\n<\/p><\/div>\n

\n

\"Eyeballer<\/p>\n

\n
Eyeballer<\/a><\/h6>\n

Convolutional neural network for analyzing pentest screenshots.<\/p>\n<\/div><\/div>\n

\n

\"EyeWitness<\/p>\n

\n
EyeWitness<\/a><\/h6>\n

Take screenshots of websites, provide server header info and identify default credentials.<\/p>\n<\/div><\/div>\n

\n

\"ezXSS<\/p>\n

\n
ezXSS<\/a><\/h6>\n

An easy way for penetration testers and bug bounty hunters to test (blind) XSS.<\/p>\n<\/div><\/div>\n

\n

\"Faraday<\/p>\n

\n
Faraday security<\/a><\/h6>\n

Open source sulnerability management and orchestration platform.<\/p>\n<\/div><\/div>\n

\n

\"favicon-hashtrick<\/p>\n

\n
favicon-hashtrick<\/a><\/h6>\n

Python script implementing the favicon hash trick to find subdomains.<\/p>\n<\/div><\/div>\n

\n

\"fcrackzip<\/p>\n<\/p><\/div>\n

\n

\"FDsploit<\/p>\n

\n
FDsploit<\/a><\/h6>\n

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.<\/p>\n<\/div><\/div>\n

\n

\"Femida<\/p>\n

\n
Femida<\/a><\/h6>\n

Automated blind-xss search for Burp Suite.<\/p>\n<\/div><\/div>\n

\n

\"Feroxbuster<\/p>\n

\n
Feroxbuster<\/a><\/h6>\n

A fast, simple, recursive content discovery tool written in Rust.<\/p>\n<\/div><\/div>\n

\n

\"FestIN<\/p>\n

\n
FestIN<\/a><\/h6>\n

The powered S3 bucket finder and content discover.<\/p>\n<\/div><\/div>\n

\n

\"ffuf<\/p>\n

\n
ffuf<\/a><\/h6>\n

Fast web fuzzer written in Go.<\/p>\n<\/div><\/div>\n

\n

\"Fierce<\/p>\n

\n
Fierce<\/a><\/h6>\n

A DNS reconnaissance tool for locating non-contiguous IP space.<\/p>\n<\/div><\/div>\n

\n

\"Filebuster<\/p>\n

\n
Filebuster<\/a><\/h6>\n

An extremely fast and flexible web fuzzer.<\/p>\n<\/div><\/div>\n

\n

\"FinDOM-XSS<\/p>\n

\n
FinDOM-XSS<\/a><\/h6>\n

A fast DOM based XSS vulnerability scanner with simplicity.<\/p>\n<\/div><\/div>\n

\n

\"Findomain<\/p>\n

\n
Findomain<\/a><\/h6>\n

The complete solution for domain recognition.<\/p>\n<\/div><\/div>\n

\n

\"findsecuritycontacts.com<\/p>\n<\/p><\/div>\n

\n

\"Findsploit<\/p>\n

\n
Findsploit<\/a><\/h6>\n

Find exploits in local and online databases instantly.<\/p>\n<\/div><\/div>\n

\n

\"Fingerprinter<\/p>\n<\/p><\/div>\n

\n

\"fingerprintx<\/p>\n

\n
fingerprintx<\/a><\/h6>\n

Standalone utility for service discovery on open ports!<\/p>\n<\/div><\/div>\n

\n

\"Firebase-Extractor<\/p>\n<\/p><\/div>\n

\n

\"FireShodanMap<\/p>\n

\n
FireShodanMap<\/a><\/h6>\n

Realtime map that integrates Firebase, Google Maps and Shodan.<\/p>\n<\/div><\/div>\n

\n

\"flan<\/p>\n

\n
flan<\/a><\/h6>\n

A pretty sweet vulnerability scanner.<\/p>\n<\/div><\/div>\n

\n

\"Flow<\/p>\n

\n
Flow<\/a><\/h6>\n

Provides view with filtering capabilities for all requests from all Burp Suite tools.<\/p>\n<\/div><\/div>\n

\n

\"Fluxion<\/p>\n

\n
Fluxion<\/a><\/h6>\n

Fluxion is the future of MITM WPA attacks.<\/p>\n<\/div><\/div>\n

\n

\"FOCA<\/p>\n

\n
FOCA<\/a><\/h6>\n

Tool to find metadata and hidden information in the documents.<\/p>\n<\/div><\/div>\n

\n

\"Freddy<\/p>\n<\/p><\/div>\n

\n

\"FridaAndroidTracer<\/p>\n<\/p><\/div>\n

\n

\"fuzzagotchi<\/p>\n

\n
fuzzagotchi<\/a><\/h6>\n

A fuzzing tool written in Go. It helps your pentesting journey.<\/p>\n<\/div><\/div>\n

\n

\"Fuzzapi<\/p>\n

\n
Fuzzapi<\/a><\/h6>\n

Used for REST API pentesting and provide UI solution for gem.<\/p>\n<\/div><\/div>\n

\n

\"FuzzDB<\/p>\n

\n
FuzzDB<\/a><\/h6>\n

Attack patterns and primitives for black-box application fault injection and resource discovery.<\/p>\n<\/div><\/div>\n

\n

\"fuzzuli<\/p>\n

\n
fuzzuli<\/a><\/h6>\n

Find critical backup files by creating a dynamic wordlist based on the domain.<\/p>\n<\/div><\/div>\n

\n

\"GadgetProbe<\/p>\n

\n
GadgetProbe<\/a><\/h6>\n

Probe endpoints consuming Java serialized objects for fingerprinting.<\/p>\n<\/div><\/div>\n

\n

\"GAP<\/p>\n

\n
GAP<\/a><\/h6>\n

A Burp Suite extension to find potential endpoints and parameters.<\/p>\n<\/div><\/div>\n

\n

\"gau<\/p>\n

\n
gau<\/a><\/h6>\n

Fetch known URLs from several sources.<\/p>\n<\/div><\/div>\n

\n

\"gaussrf<\/p>\n

\n
gaussrf<\/a><\/h6>\n

Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.<\/p>\n<\/div><\/div>\n

\n

\"GET-ACQ<\/p>\n

\n
GET-ACQ<\/a><\/h6>\n

Gather all companies acquired by a given company domain name.<\/p>\n<\/div><\/div>\n

\n

\"getJS<\/p>\n

\n
getJS<\/a><\/h6>\n

A tool to fastly get all javascript sources\/files.<\/p>\n<\/div><\/div>\n

\n

\"getsploit<\/p>\n

\n
getsploit<\/a><\/h6>\n

Command line utility for searching and downloading exploits.<\/p>\n<\/div><\/div>\n

\n

\"gf<\/p>\n

\n
gf<\/a><\/h6>\n

A wrapper around grep to avoid typing common patterns.<\/p>\n<\/div><\/div>\n

\n

\"Ghauri<\/p>\n

\n
Ghauri<\/a><\/h6>\n

Automates the process of detecting and exploiting SQL injection security flaws.<\/p>\n<\/div><\/div>\n

\n

\"GHunt<\/p>\n

\n
GHunt<\/a><\/h6>\n

Offensive Google framework.<\/p>\n<\/div><\/div>\n

\n

\"git-all-secrets<\/p>\n

\n
git-all-secrets<\/a><\/h6>\n

Capture all the git secrets by leveraging multiple open source git searching tools.<\/p>\n<\/div><\/div>\n

\n

\"git-dumper<\/p>\n

\n
git-dumper<\/a><\/h6>\n

A tool to dump a git repository from a website.<\/p>\n<\/div><\/div>\n

\n

\"git-vuln-finder<\/p>\n

\n
git-vuln-finder<\/a><\/h6>\n

Find potential software vulnerabilities from git commit messages.<\/p>\n<\/div><\/div>\n

\n

\"git-wild-hunt<\/p>\n

\n
git-wild-hunt<\/a><\/h6>\n

A tool to hunt for credentials in GitHub wild AKA git*hunt.<\/p>\n<\/div><\/div>\n

\n

\"GitFive<\/p>\n

\n
GitFive<\/a><\/h6>\n

An OSINT tool to investigate GitHub profiles.<\/p>\n<\/div><\/div>\n

\n

\"GitGot<\/p>\n

\n
GitGot<\/a><\/h6>\n

Rapidly search through troves of public data on GitHub for sensitive secrets.<\/p>\n<\/div><\/div>\n

\n

\"gitGraber<\/p>\n

\n
gitGraber<\/a><\/h6>\n

Monitor GitHub to search and find sensitive data in real time.<\/p>\n<\/div><\/div>\n

\n

\"github-subdomains<\/p>\n<\/p><\/div>\n

\n

\"GitHunter<\/p>\n

\n
GitHunter<\/a><\/h6>\n

A tool for searching a Git repository for interesting content.<\/p>\n<\/div><\/div>\n

\n

\"gitjacker<\/p>\n

\n
gitjacker<\/a><\/h6>\n

Leak git repositories from misconfigured websites.<\/p>\n<\/div><\/div>\n

\n

\"gitlab-subdomains<\/p>\n<\/p><\/div>\n

\n

\"GitMiner<\/p>\n

\n
GitMiner<\/a><\/h6>\n

Tool for advanced mining for content on Github.<\/p>\n<\/div><\/div>\n

\n

\"gitpillage<\/p>\n<\/p><\/div>\n

\n

\"Gitrob<\/p>\n

\n
Gitrob<\/a><\/h6>\n

Reconnaissance tool for GitHub organizations.<\/p>\n<\/div><\/div>\n

\n

\"gitscraper<\/p>\n

\n
gitscraper<\/a><\/h6>\n

Scrapes public GitHub repositories for common naming conventions in variables, folders and files.<\/p>\n<\/div><\/div>\n

\n

\"GitTools<\/p>\n

\n
GitTools<\/a><\/h6>\n

A repository with 3 tools for pwn’ing websites with .git repositories available.<\/p>\n<\/div><\/div>\n

\n

\"GoAltdns<\/p>\n

\n
GoAltdns<\/a><\/h6>\n

A permutation generation tool written in golang.<\/p>\n<\/div><\/div>\n

\n

\"Gobuster<\/p>\n

\n
Gobuster<\/a><\/h6>\n

Directory\/File, DNS and VHost busting tool written in Go.<\/p>\n<\/div><\/div>\n

\n

\"GoCloud<\/p>\n

\n
GoCloud<\/a><\/h6>\n

Checks whether a domain is hosted on a cloud service.<\/p>\n<\/div><\/div>\n

\n

\"GoLinkFinder<\/p>\n<\/p><\/div>\n

\n

\"Gopherus<\/p>\n

\n
Gopherus<\/a><\/h6>\n

Generates gopher link for exploiting SSRF and gaining RCE in various servers.<\/p>\n<\/div><\/div>\n

\n

\"gospider<\/p>\n<\/p><\/div>\n

\n

\"gotator<\/p>\n

\n
gotator<\/a><\/h6>\n

Generates DNS wordlists through permutations.<\/p>\n<\/div><\/div>\n

\n

\"gowitness<\/p>\n

\n
gowitness<\/a><\/h6>\n

A golang, web screenshot utility using Chrome Headless.<\/p>\n<\/div><\/div>\n

\n

\"grafana-ssrf<\/p>\n<\/p><\/div>\n

\n

\"GraphQL<\/p>\n<\/p><\/div>\n

\n

\"GraphQL<\/p>\n<\/p><\/div>\n

\n

\"graphql-introspection-analyzer<\/p>\n<\/p><\/div>\n

\n

\"graphql-path-enum<\/p>\n

\n
graphql-path-enum<\/a><\/h6>\n

Lists the different ways of reaching a given type in a GraphQL schema.<\/p>\n<\/div><\/div>\n

\n

\"GraphQLmap<\/p>\n

\n
GraphQLmap<\/a><\/h6>\n

Scripting engine to interact with a graphql endpoint for pentesting purposes.<\/p>\n<\/div><\/div>\n

\n

\"graphw00f<\/p>\n

\n
graphw00f<\/a><\/h6>\n

GraphQL Server Engine Fingerprinting utility for software security professionals.<\/p>\n<\/div><\/div>\n

\n

\"GrayhatWarfare<\/p>\n<\/p><\/div>\n

\n

\"GRecon<\/p>\n

\n
GRecon<\/a><\/h6>\n

Run a Google based passive recon against your scope.<\/p>\n<\/div><\/div>\n

\n

\"grep.app<\/p>\n

\n
grep.app<\/a><\/h6>\n

Searches code from over a half million public repositories on GitHub.<\/p>\n<\/div><\/div>\n

\n

\"Ground<\/p>\n

\n
Ground control<\/a><\/h6>\n

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"GSAN<\/p>\n

\n
GSAN<\/a><\/h6>\n

Extract subdomains from SSL certificates in HTTPS sites.<\/p>\n<\/div><\/div>\n

\n

\"gwdomains<\/p>\n

\n
gwdomains<\/a><\/h6>\n

Sub domain wild card filtering tool.<\/p>\n<\/div><\/div>\n

\n

\"GyoiThon<\/p>\n

\n
GyoiThon<\/a><\/h6>\n

Growing penetration test tool using Machine Learning.<\/p>\n<\/div><\/div>\n

\n

\"H1<\/p>\n

\n
H1 Report Finder<\/a><\/h6>\n

A burpsuite extension to find security reports published on HackerOne based on the selected host.<\/p>\n<\/div><\/div>\n

\n

\"h1-search<\/p>\n

\n
h1-search<\/a><\/h6>\n

Request the public disclosures on a specific HackerOne program.<\/p>\n<\/div><\/div>\n

\n

\"h2cSmuggler<\/p>\n

\n
h2cSmuggler<\/a><\/h6>\n

HTTP Request Smuggling over HTTP\/2 Cleartext.<\/p>\n<\/div><\/div>\n

\n

\"Hackability<\/p>\n

\n
Hackability<\/a><\/h6>\n

Probe a rendering engine for vulnerabilities and other features.<\/p>\n<\/div><\/div>\n

\n

\"Hacker101<\/p>\n<\/p><\/div>\n

\n

\"Hackingtool<\/p>\n<\/p><\/div>\n

\n

\"Hackvertor<\/p>\n

\n
Hackvertor<\/a><\/h6>\n

Tag based conversion tool written in Java implemented as a Burp Suite extension.<\/p>\n<\/div><\/div>\n

\n

\"Hakrawler<\/p>\n

\n
Hakrawler<\/a><\/h6>\n

Simple, fast web crawler designed for discovery of endpoints and assets within a web application.<\/p>\n<\/div><\/div>\n

\n

\"hakrevdns<\/p>\n

\n
hakrevdns<\/a><\/h6>\n

Small, fast tool for performing reverse DNS lookups en masse.<\/p>\n<\/div><\/div>\n

\n

\"haktldextract<\/p>\n<\/p><\/div>\n

\n

\"Hamburglar<\/p>\n

\n
Hamburglar<\/a><\/h6>\n

Collect useful information from urls, directories, and files.<\/p>\n<\/div><\/div>\n

\n

\"Hash<\/p>\n<\/p><\/div>\n

\n

\"Hashcat<\/p>\n

\n
Hashcat<\/a><\/h6>\n

World’s fastest and most advanced password recovery utility<\/p>\n<\/div><\/div>\n

\n

\"Have<\/p>\n<\/p><\/div>\n

\n

\"Hawkeye<\/p>\n

\n
Hawkeye<\/a><\/h6>\n

Filesystem analysis tool\/directory looking for interesting stuff.<\/p>\n<\/div><\/div>\n

\n

\"headi<\/p>\n

\n
headi<\/a><\/h6>\n

Customisable and automated HTTP header injection.<\/p>\n<\/div><\/div>\n

\n

\"Headless<\/p>\n

\n
Headless Burp<\/a><\/h6>\n

Provides a suite of extensions and a maven plugin to automate security tests using Burp Suite.<\/p>\n<\/div><\/div>\n

\n

\"HostileSubBruteforcer<\/p>\n<\/p><\/div>\n

\n

\"House<\/p>\n

\n
House<\/a><\/h6>\n

A runtime mobile application analysis toolkit with a Web GUI.<\/p>\n<\/div><\/div>\n

\n

\"HTTP<\/p>\n

\n
HTTP Request Smuggler<\/a><\/h6>\n

Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.<\/p>\n<\/div><\/div>\n

\n

\"http-request-smuggling<\/p>\n<\/p><\/div>\n

\n

\"HTTPoxy<\/p>\n

\n
HTTPoxy Scanner<\/a><\/h6>\n

A Burp Suite extension that checks for the HTTPoxy vulnerability.<\/p>\n<\/div><\/div>\n

\n

\"httprebind<\/p>\n

\n
httprebind<\/a><\/h6>\n

Automatic tool for DNS rebinding-based SSRF attacks.<\/p>\n<\/div><\/div>\n

\n

\"httprobe<\/p>\n

\n
httprobe<\/a><\/h6>\n

Take a list of domains and probe for working HTTP and HTTPS servers.<\/p>\n<\/div><\/div>\n

\n

\"httpscreenshot<\/p>\n

\n
httpscreenshot<\/a><\/h6>\n

Grabs screenshots and HTML of large numbers of websites.<\/p>\n<\/div><\/div>\n

\n

\"httpx<\/p>\n

\n
httpx<\/a><\/h6>\n

HTTP toolkit that allows running multiple probes using the retryablehttp library.<\/p>\n<\/div><\/div>\n

\n

\"Hydra<\/p>\n

\n
Hydra<\/a><\/h6>\n

Very fast password cracking tool.<\/p>\n<\/div><\/div>\n

\n

\"IDontSpeakSSL<\/p>\n

\n
IDontSpeakSSL<\/a><\/h6>\n

Simple tool to scan large scope and provide SSL\/TLS vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"Injectify<\/p>\n

\n
Injectify<\/a><\/h6>\n

Perform advanced MiTM attacks on websites with ease.<\/p>\n<\/div><\/div>\n

\n

\"Injectus<\/p>\n<\/p><\/div>\n

\n

\"InQL<\/p>\n

\n
InQL<\/a><\/h6>\n

Burp Extension for GraphQL Security Testing.<\/p>\n<\/div><\/div>\n

\n

\"interactsh<\/p>\n

\n
interactsh<\/a><\/h6>\n

An OOB interaction gathering server and client library<\/p>\n<\/div><\/div>\n

\n

\"Interlace<\/p>\n

\n
Interlace<\/a><\/h6>\n

Turn single threaded command line applications into a fast, multi-threaded application.<\/p>\n<\/div><\/div>\n

\n

\"IntruderPayloads<\/p>\n

\n
IntruderPayloads<\/a><\/h6>\n

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.<\/p>\n<\/div><\/div>\n

\n

\"IPRotate<\/p>\n

\n
IPRotate<\/a><\/h6>\n

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.<\/p>\n<\/div><\/div>\n

\n

\"J2EEScan<\/p>\n

\n
J2EEScan<\/a><\/h6>\n

Improve the test coverage during web application penetration tests on J2EE applications.<\/p>\n<\/div><\/div>\n

\n

\"Jaeles<\/p>\n

\n
Jaeles<\/a><\/h6>\n

The Swiss Army knife for automated Web Application Testing<\/p>\n<\/div><\/div>\n

\n

\"Java<\/p>\n<\/p><\/div>\n

\n

\"John<\/p>\n<\/p><\/div>\n

\n

\"JoomScan<\/p>\n

\n
JoomScan<\/a><\/h6>\n

OWASP Joomla Vulnerability Scanner Project.<\/p>\n<\/div><\/div>\n

\n

\"JOSEPH<\/p>\n

\n
JOSEPH<\/a><\/h6>\n

JavaScript Object Signing and Encryption Pentesting Helper.<\/p>\n<\/div><\/div>\n

\n

\"JS-Scan<\/p>\n

\n
JS-Scan<\/a><\/h6>\n

A .js scanner, built in PHP, designed to scrape urls and other info.<\/p>\n<\/div><\/div>\n

\n

\"JSgen<\/p>\n

\n
JSgen<\/a><\/h6>\n

Generate javascript code to be injected in case you find a Server Side Javascript Injection.<\/p>\n<\/div><\/div>\n

\n

\"JSONBeautifier<\/p>\n<\/p><\/div>\n

\n

\"JSONBee<\/p>\n

\n
JSONBee<\/a><\/h6>\n

A ready to use JSONP endpoints\/payloads to help bypass Content Security Policy.<\/p>\n<\/div><\/div>\n

\n

\"JSParser<\/p>\n

\n
JSParser<\/a><\/h6>\n

Python script to parse relative URLs from JavaScript files.<\/p>\n<\/div><\/div>\n

\n

\"jSQL<\/p>\n<\/p><\/div>\n

\n

\"JSShell<\/p>\n

\n
JSShell<\/a><\/h6>\n

An interactive multi-user web JS shell.<\/p>\n<\/div><\/div>\n

\n

\"JWT<\/p>\n<\/p><\/div>\n

\n

\"JWT<\/p>\n<\/p><\/div>\n

\n

\"JWT<\/p>\n

\n
JWT Tool<\/a><\/h6>\n

A toolkit for testing, tweaking and cracking JSON Web Tokens.<\/p>\n<\/div><\/div>\n

\n

\"jwt-hack<\/p>\n

\n
jwt-hack<\/a><\/h6>\n

JWT encoding\/decoding, generates payloads for JWT attack and very fast cracking.<\/p>\n<\/div><\/div>\n

\n

\"jwt-heartbreaker<\/p>\n

\n
jwt-heartbreaker<\/a><\/h6>\n

Burp Suite extension to check JWT for using keys from known from public sources.<\/p>\n<\/div><\/div>\n

\n

\"JWT4B<\/p>\n

\n
JWT4B<\/a><\/h6>\n

JWT Support for Burp Suite.<\/p>\n<\/div><\/div>\n

\n

\"jwtear<\/p>\n

\n
jwtear<\/a><\/h6>\n

Modular command-line tool to parse, create and manipulate JWT tokens.<\/p>\n<\/div><\/div>\n

\n

\"JWTweak<\/p>\n

\n
JWTweak<\/a><\/h6>\n

Detects JWT algorithm and provides options to generate a new JWT based on another algorithm.<\/p>\n<\/div><\/div>\n

\n

\"Kadimus<\/p>\n

\n
Kadimus<\/a><\/h6>\n

Check for and exploit LFI vulnerabilities with a focus on PHP systems.<\/p>\n<\/div><\/div>\n

\n

\"katana<\/p>\n

\n
katana<\/a><\/h6>\n

A next-generation crawling and spidering framework.<\/p>\n<\/div><\/div>\n

\n

\"Keyfinder<\/p>\n

\n
Keyfinder<\/a><\/h6>\n

Find and analyze private\/public key files and Android APK files.<\/p>\n<\/div><\/div>\n

\n

\"kicks3<\/p>\n

\n
kicks3<\/a><\/h6>\n

S3 bucket finder from html,js and bucket misconfiguration testing tool.<\/p>\n<\/div><\/div>\n

\n

\"Knockpy<\/p>\n<\/p><\/div>\n

\n

\"Knoxnl<\/p>\n

\n
Knoxnl<\/a><\/h6>\n

This is a python wrapper around the amazing KNOXSS.<\/p>\n<\/div><\/div>\n

\n

\"KNOXSS<\/p>\n

\n
KNOXSS<\/a><\/h6>\n

Online XSS tool with demonstration of vulnerability.<\/p>\n<\/div><\/div>\n

\n

\"kxss<\/p>\n

\n
kxss<\/a><\/h6>\n

Adaption of tomnomnom’s kxss tool with a different output format.<\/p>\n<\/div><\/div>\n

\n

\"LazyHunter<\/p>\n

\n
LazyHunter<\/a><\/h6>\n

A framework that provides a web UI to commonly used Bug Hunting\/Pentesting tools.<\/p>\n<\/div><\/div>\n

\n

\"lazys3<\/p>\n

\n
lazys3<\/a><\/h6>\n

Ruby script to bruteforce for AWS s3 buckets using different permutations.<\/p>\n<\/div><\/div>\n

\n

\"leakScraper<\/p>\n

\n
leakScraper<\/a><\/h6>\n

Set of tools to process and visualize huge text files containing credentials.<\/p>\n<\/div><\/div>\n

\n

\"LFI<\/p>\n

\n
LFI Suite<\/a><\/h6>\n

Totally Automatic LFI Exploiter and Scanner.<\/p>\n<\/div><\/div>\n

\n

\"LFI-Enum<\/p>\n

\n
LFI-Enum<\/a><\/h6>\n

Scripts to execute enumeration via LFI<\/p>\n<\/div><\/div>\n

\n

\"Liffy<\/p>\n

\n
Liffy<\/a><\/h6>\n

Local file inclusion exploitation tool.<\/p>\n<\/div><\/div>\n

\n

\"LinEnum<\/p>\n

\n
LinEnum<\/a><\/h6>\n

Scripted Local Linux Enumeration & Privilege Escalation Checks.<\/p>\n<\/div><\/div>\n

\n

\"LinkFinder<\/p>\n

\n
LinkFinder<\/a><\/h6>\n

A python script that finds endpoints in JavaScript files.<\/p>\n<\/div><\/div>\n

\n

\"linWinPwn<\/p>\n

\n
linWinPwn<\/a><\/h6>\n

Automates a number of Active Directory enumeration and vulnerability.<\/p>\n<\/div><\/div>\n

\n

\"linx<\/p>\n

\n
linx<\/a><\/h6>\n

Reveals invisible links within JavaScript files.<\/p>\n<\/div><\/div>\n

\n

\"LiveOverflow<\/p>\n<\/p><\/div>\n

\n

\"lk_scraper<\/p>\n

\n
lk_scraper<\/a><\/h6>\n

A fully configurable LinkedIn scraper: scrape anything within LinkedIn.<\/p>\n<\/div><\/div>\n

\n

\"lnkbomb<\/p>\n

\n
lnkbomb<\/a><\/h6>\n

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.<\/p>\n<\/div><\/div>\n

\n

\"localdataHog<\/p>\n

\n
localdataHog<\/a><\/h6>\n

String-based secret-searching tool, high entropy and regexes.<\/p>\n<\/div><\/div>\n

\n

\"Logger++<\/p>\n

\n
Logger++<\/a><\/h6>\n

Log activities of all the tools in Burp Suite.<\/p>\n<\/div><\/div>\n

\n

\"lorsrf<\/p>\n

\n
lorsrf<\/a><\/h6>\n

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.<\/p>\n<\/div><\/div>\n

\n

\"MagicRecon<\/p>\n

\n
MagicRecon<\/a><\/h6>\n

A powerful shell script to maximize the recon and data collection process.<\/p>\n<\/div><\/div>\n

\n

\"Maigret<\/p>\n

\n
Maigret<\/a><\/h6>\n

????\ufe0f\u200d\u2642\ufe0f Collect a dossier on a person by username from thousands of sites.<\/p>\n<\/div><\/div>\n

\n

\"Malicious<\/p>\n<\/p><\/div>\n

\n

\"Maltego<\/p>\n

\n
Maltego<\/a><\/h6>\n

Open source intelligence and forensics application.<\/p>\n<\/div><\/div>\n

\n

\"mapcidr<\/p>\n

\n
mapcidr<\/a><\/h6>\n

Small utility program to perform multiple operations for a given subnet\/CIDR ranges.<\/p>\n<\/div><\/div>\n

\n

\"Maryam<\/p>\n

\n
Maryam<\/a><\/h6>\n

Open-source Intelligence Framework.<\/p>\n<\/div><\/div>\n

\n

\"mass-s3-bucket-tester<\/p>\n

\n
mass-s3-bucket-tester<\/a><\/h6>\n

Tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable.<\/p>\n<\/div><\/div>\n

\n

\"Mass3<\/p>\n

\n
Mass3<\/a><\/h6>\n

Enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP.<\/p>\n<\/div><\/div>\n

\n

\"Masscan<\/p>\n

\n
Masscan<\/a><\/h6>\n

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.<\/p>\n<\/div><\/div>\n

\n

\"MassDNS<\/p>\n

\n
MassDNS<\/a><\/h6>\n

A high-performance DNS stub resolver for bulk lookups and reconnaissance.<\/p>\n<\/div><\/div>\n

\n

\"meg<\/p>\n

\n
meg<\/a><\/h6>\n

Fetch many paths for many hosts, without killing the hosts.<\/p>\n<\/div><\/div>\n

\n

\"Metagoofil<\/p>\n

\n
Metagoofil<\/a><\/h6>\n

Search Google and download specific file types.<\/p>\n<\/div><\/div>\n

\n

\"metahttp<\/p>\n

\n
metahttp<\/a><\/h6>\n

Script that automates the scanning of a target network for HTTP resources through XXE.<\/p>\n<\/div><\/div>\n

\n

\"Metasploit<\/p>\n

\n
Metasploit<\/a><\/h6>\n

The world\u2019s most used penetration testing framework.<\/p>\n<\/div><\/div>\n

\n

\"mitmproxy<\/p>\n

\n
mitmproxy<\/a><\/h6>\n

An interactive TLS-capable intercepting HTTP proxy.<\/p>\n<\/div><\/div>\n

\n

\"mksub<\/p>\n

\n
mksub<\/a><\/h6>\n

Generate tens of thousands of subdomain combinations in a matter of seconds.<\/p>\n<\/div><\/div>\n

\n

\"MSDNSScan<\/p>\n

\n
MSDNSScan<\/a><\/h6>\n

Identify DNS records, check for zone transfers and conduct subdomain enumeration.<\/p>\n<\/div><\/div>\n

\n

\"MSDorkDump<\/p>\n<\/p><\/div>\n

\n

\"msldap<\/p>\n

\n
msldap<\/a><\/h6>\n

LDAP library for auditing Microsoft Active Directory.<\/p>\n<\/div><\/div>\n

\n

\"MSSQLi-DUET<\/p>\n

\n
MSSQLi-DUET<\/a><\/h6>\n

SQL injection script for Microsoft SQL Server.<\/p>\n<\/div><\/div>\n

\n

\"mx-takeover<\/p>\n

\n
mx-takeover<\/a><\/h6>\n

Focuses DNS MX records and detects misconfigured MX records.<\/p>\n<\/div><\/div>\n

\n

\"Naabu<\/p>\n

\n
Naabu<\/a><\/h6>\n

A fast port scanner written in go with a focus on reliability and simplicity.<\/p>\n<\/div><\/div>\n

\n

\"NahamSec<\/p>\n<\/p><\/div>\n

\n

\"Namechk<\/p>\n

\n
Namechk<\/a><\/h6>\n

Check usernames on more than 100 websites, forums and social networks.<\/p>\n<\/div><\/div>\n

\n

\"Nessus<\/p>\n

\n
Nessus database export<\/a><\/h6>\n

Export Nessus results to a relational database for use in reports, analysis, or whatever else.<\/p>\n<\/div><\/div>\n

\n

\"Nginxpwner<\/p>\n

\n
Nginxpwner<\/a><\/h6>\n

Simple tool to look for common Nginx misconfigurations and vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"Nikto<\/p>\n

\n
Nikto<\/a><\/h6>\n

Nikto web server scanner.<\/p>\n<\/div><\/div>\n

\n

\"Nmap<\/p>\n

\n
Nmap<\/a><\/h6>\n

Nmap – the Network Mapper.<\/p>\n<\/div><\/div>\n

\n

\"nmap-query-xml<\/p>\n

\n
nmap-query-xml<\/a><\/h6>\n

A simple program to query nmap XML files in the terminal.<\/p>\n<\/div><\/div>\n

\n

\"NoSQL<\/p>\n

\n
NoSQL Injector<\/a><\/h6>\n

NoSql Injection CLI tool for finding vulnerable websites using MongoDB.<\/p>\n<\/div><\/div>\n

\n

\"NoSQLMap<\/p>\n

\n
NoSQLMap<\/a><\/h6>\n

Automated NoSQL database enumeration and web application exploitation tool.<\/p>\n<\/div><\/div>\n

\n

\"Nozaki<\/p>\n

\n
Nozaki<\/a><\/h6>\n

HTTP fuzzer engine security oriented.<\/p>\n<\/div><\/div>\n

\n

\"NSBrute<\/p>\n

\n
NSBrute<\/a><\/h6>\n

Python utility to takeover domains vulnerable to AWS NS Takeover.<\/p>\n<\/div><\/div>\n

\n

\"NSDetect<\/p>\n

\n
NSDetect<\/a><\/h6>\n

Utility to detect AWS NS Takeover.<\/p>\n<\/div><\/div>\n

\n

\"Nuclei<\/p>\n

\n
Nuclei<\/a><\/h6>\n

Fast and customizable vulnerability scanner based on simple YAML based DSL.<\/p>\n<\/div><\/div>\n

\n

\"Nuclei<\/p>\n

\n
Nuclei templates<\/a><\/h6>\n

Community curated list of templates for the Nuclei engine to find security vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"OAUTHScan<\/p>\n

\n
OAUTHScan<\/a><\/h6>\n

Burp Suite Extension useful to verify OAUTHv2 and OpenID security.<\/p>\n<\/div><\/div>\n

\n

\"off-by-slash<\/p>\n

\n
off-by-slash<\/a><\/h6>\n

Burp extension to detect alias traversal via NGINX misconfiguration at scale.<\/p>\n<\/div><\/div>\n

\n

\"Oh365UserFinder<\/p>\n<\/p><\/div>\n

\n

\"OneForAll<\/p>\n

\n
OneForAll<\/a><\/h6>\n

A powerful subdomain integration tool.<\/p>\n<\/div><\/div>\n

\n

\"open-sesame<\/p>\n

\n
open-sesame<\/a><\/h6>\n

Contains HackerOne disclosed reports and other bug bounty writeups.<\/p>\n<\/div><\/div>\n

\n

\"OpenAPI<\/p>\n

\n
OpenAPI<\/a><\/h6>\n

Parse OpenAPI specifications into the BurpSuite for automating RESTful API testing.<\/p>\n<\/div><\/div>\n

\n

\"OpenRedireX<\/p>\n<\/p><\/div>\n

\n

\"OpenVAS<\/p>\n

\n
OpenVAS<\/a><\/h6>\n

This repository contains the scanner component for Greenbone Community Edition.<\/p>\n<\/div><\/div>\n

\n

\"Oralyzer<\/p>\n<\/p><\/div>\n

\n

\"Osmedeus<\/p>\n

\n
Osmedeus<\/a><\/h6>\n

A Workflow Engine for Offensive Security<\/p>\n<\/div><\/div>\n

\n

\"OWASP<\/p>\n

\n
OWASP<\/a><\/h6>\n

A nonprofit foundation that works to improve the security of software.<\/p>\n<\/div><\/div>\n

\n

\"oxml_xxe<\/p>\n

\n
oxml_xxe<\/a><\/h6>\n

Embeds XXE\/XML exploits into different filetypes.<\/p>\n<\/div><\/div>\n

\n

\"Pacu<\/p>\n

\n
Pacu<\/a><\/h6>\n

The exploitation framework designed for testing the security of AWS environments.<\/p>\n<\/div><\/div>\n

\n

\"padding-oracle-attacker<\/p>\n

\n
padding-oracle-attacker<\/a><\/h6>\n

Execute padding oracle attacks with support for concurrent network requests and an elegant UI.<\/p>\n<\/div><\/div>\n

\n

\"param-miner<\/p>\n

\n
param-miner<\/a><\/h6>\n

Identifies hidden, unlinked parameters, useful for finding web cache poisoning vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"parameth<\/p>\n

\n
parameth<\/a><\/h6>\n

Brute discover GET and POST parameters.<\/p>\n<\/div><\/div>\n

\n

\"ParamPamPam<\/p>\n

\n
ParamPamPam<\/a><\/h6>\n

This tool for brute discover GET and POST parameters.<\/p>\n<\/div><\/div>\n

\n

\"ParamSpider<\/p>\n

\n
ParamSpider<\/a><\/h6>\n

Mining parameters from dark corners of Web Archives.<\/p>\n<\/div><\/div>\n

\n

\"Patator<\/p>\n

\n
Patator<\/a><\/h6>\n

Multi-purpose brute-forcer, with a modular design and a flexible usage.<\/p>\n<\/div><\/div>\n

\n

\"Payloads<\/p>\n<\/p><\/div>\n

\n

\"PCredz<\/p>\n

\n
PCredz<\/a><\/h6>\n

This tool extracts secrets from a pcap file or from a live interface.<\/p>\n<\/div><\/div>\n

\n

\"PEAS-ng<\/p>\n

\n
PEAS-ng<\/a><\/h6>\n

Privilege Escalation Awesome Scripts SUITE.<\/p>\n<\/div><\/div>\n

\n

\"PentesterLab<\/p>\n<\/p><\/div>\n

\n

\"PentesterLand<\/p>\n

\n
PentesterLand<\/a><\/h6>\n

Sharing knowledge that makes your life as bug hunters and pentesters easier.<\/p>\n<\/div><\/div>\n

\n

\"Photon<\/p>\n

\n
Photon<\/a><\/h6>\n

Incredibly fast crawler designed for OSINT.<\/p>\n<\/div><\/div>\n

\n

\"PHPGGC<\/p>\n

\n
PHPGGC<\/a><\/h6>\n

PHP unserialize() payloads along with a tool to generate them.<\/p>\n<\/div><\/div>\n

\n

\"pivotnacci<\/p>\n

\n
pivotnacci<\/a><\/h6>\n

A tool to make socks connections through HTTP agents.<\/p>\n<\/div><\/div>\n

\n

\"PortBender<\/p>\n

\n
PortBender<\/a><\/h6>\n

A TCP port redirection utility that allows inbound traffic redirection.<\/p>\n<\/div><\/div>\n

\n

\"PortSwigger<\/p>\n<\/p><\/div>\n

\n

\"PostMessage_Fuzz_Tool<\/p>\n<\/p><\/div>\n

\n

\"postMessage-tracker<\/p>\n<\/p><\/div>\n

\n

\"pown.js<\/p>\n

\n
pown.js<\/a><\/h6>\n

Security testing and exploitation toolkit.<\/p>\n<\/div><\/div>\n

\n

\"Print-My-Shell<\/p>\n

\n
Print-My-Shell<\/a><\/h6>\n

Automate the process of generating various reverse shells.<\/p>\n<\/div><\/div>\n

\n

\"Prowler<\/p>\n

\n
Prowler<\/a><\/h6>\n

Open Source Security tool to perform Cloud Security best practices<\/p>\n<\/div><\/div>\n

\n

\"proxify<\/p>\n

\n
proxify<\/a><\/h6>\n

Swiss Army knife Proxy tool for HTTP(S) traffic capture, manipulation, and replay on the go.<\/p>\n<\/div><\/div>\n

\n

\"psudohash<\/p>\n

\n
psudohash<\/a><\/h6>\n

Password list generator for orchestrating brute force attacks.<\/p>\n<\/div><\/div>\n

\n

\"puredns<\/p>\n

\n
puredns<\/a><\/h6>\n

Puredns is a fast domain resolver & subdomain bruteforcing tool.<\/p>\n<\/div><\/div>\n

\n

\"pwncat<\/p>\n

\n
pwncat<\/a><\/h6>\n

Netcat on steroids with many extra features.<\/p>\n<\/div><\/div>\n

\n

\"pyBuster<\/p>\n

\n
pyBuster<\/a><\/h6>\n

A multi-target URL bruteforcer.<\/p>\n<\/div><\/div>\n

\n

\"pyfiscan<\/p>\n

\n
pyfiscan<\/a><\/h6>\n

Free web-application vulnerability and version scanner.<\/p>\n<\/div><\/div>\n

\n

\"qsfuzz<\/p>\n

\n
qsfuzz<\/a><\/h6>\n

qsfuzz is a tool that allows to write simple rules in YAML that define what value to inject<\/p>\n<\/div><\/div>\n

\n

\"qsinject<\/p>\n

\n
qsinject<\/a><\/h6>\n

Allows you to quickly substitute query string values with regex matches, one-at-a-time.<\/p>\n<\/div><\/div>\n

\n

\"qsreplace<\/p>\n

\n
qsreplace<\/a><\/h6>\n

Accept URLs on stdin, replace all query string values with a user-supplied value.<\/p>\n<\/div><\/div>\n

\n

\"Raccoon<\/p>\n

\n
Raccoon<\/a><\/h6>\n

A high performance offensive security tool for reconnaissance and vulnerability scanning.<\/p>\n<\/div><\/div>\n

\n

\"Race<\/p>\n<\/p><\/div>\n

\n

\"RacePWN<\/p>\n<\/p><\/div>\n

\n

\"RainbowCrack<\/p>\n<\/p><\/div>\n

\n

\"rate-limit-checker<\/p>\n<\/p><\/div>\n

\n

\"Reaver<\/p>\n

\n
Reaver<\/a><\/h6>\n

Implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs.<\/p>\n<\/div><\/div>\n

\n

\"recollapse<\/p>\n

\n
recollapse<\/a><\/h6>\n

REcollapse is a helper tool for black-box regex fuzzing to bypass validations<\/p>\n<\/div><\/div>\n

\n

\"Recon-ng<\/p>\n

\n
Recon-ng<\/a><\/h6>\n

OSINT tool aimed at reducing the time spent harvesting information from open sources.<\/p>\n<\/div><\/div>\n

\n

\"reconFTW<\/p>\n

\n
reconFTW<\/a><\/h6>\n

Runs the best set of tools to perform scanning and finding out vulnerabilities on a target domain.<\/p>\n<\/div><\/div>\n

\n

\"ReconNess<\/p>\n

\n
ReconNess<\/a><\/h6>\n

Continuous recon and pipeline tools setup.<\/p>\n<\/div><\/div>\n

\n

\"RecurseBuster<\/p>\n

\n
RecurseBuster<\/a><\/h6>\n

Rapid content discovery tool for recursively querying webservers.<\/p>\n<\/div><\/div>\n

\n

\"regulator<\/p>\n

\n
regulator<\/a><\/h6>\n

Automated learning of regexes for DNS discovery.<\/p>\n<\/div><\/div>\n

\n

\"Rekono<\/p>\n

\n
Rekono<\/a><\/h6>\n

Execute full pentesting processes combining multiple hacking tools automatically.<\/p>\n<\/div><\/div>\n

\n

\"related-domains<\/p>\n<\/p><\/div>\n

\n

\"Rengine<\/p>\n

\n
Rengine<\/a><\/h6>\n

Automated reconnaissance framework for webapps, highly configurable streamlined recon process.<\/p>\n<\/div><\/div>\n

\n

\"Replicator<\/p>\n

\n
Replicator<\/a><\/h6>\n

Burp Suite extension to help developers replicate findings from pentests.<\/p>\n<\/div><\/div>\n

\n

\"Request<\/p>\n

\n
Request Highlighter<\/a><\/h6>\n

Burp Suite extension that automatically highlights different HTTP requests.<\/p>\n<\/div><\/div>\n

\n

\"Requests-Racer<\/p>\n<\/p><\/div>\n

\n

\"Retire.js<\/p>\n

\n
Retire.js<\/a><\/h6>\n

Detects the use of JavaScript libraries with known vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"RevShells<\/p>\n

\n
RevShells<\/a><\/h6>\n

Hosted Reverse Shell generator with a ton of functionality.<\/p>\n<\/div><\/div>\n

\n

\"rexsser<\/p>\n

\n
rexsser<\/a><\/h6>\n

Burp Suite plugin that extracts keywords from response using and test for reflected XSS.<\/p>\n<\/div><\/div>\n

\n

\"RouterSploit<\/p>\n<\/p><\/div>\n

\n

\"RsaCtfTool<\/p>\n

\n
RsaCtfTool<\/a><\/h6>\n

RSA multi-attacks tool: uncypher data from a weak public key and try to recover a private key.<\/p>\n<\/div><\/div>\n

\n

\"Rubeus<\/p>\n

\n
Rubeus<\/a><\/h6>\n

Rubeus is a toolkit for Kerberos interaction and abuses.<\/p>\n<\/div><\/div>\n

\n

\"Runtime<\/p>\n<\/p><\/div>\n

\n

\"rush<\/p>\n

\n
rush<\/a><\/h6>\n

A cross-platform command-line tool for executing jobs in parallel.<\/p>\n<\/div><\/div>\n

\n

\"RustScan<\/p>\n

\n
RustScan<\/a><\/h6>\n

The Modern Port Scanner. Fast, smart, effective.<\/p>\n<\/div><\/div>\n

\n

\"Rusty<\/p>\n

\n
Rusty Hog<\/a><\/h6>\n

A suite of secret scanners built in Rust for performance.<\/p>\n<\/div><\/div>\n

\n

\"S3<\/p>\n

\n
S3 Objects Check<\/a><\/h6>\n

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.<\/p>\n<\/div><\/div>\n

\n

\"s3-buckets-finder<\/p>\n<\/p><\/div>\n

\n

\"S3BucketList<\/p>\n

\n
S3BucketList<\/a><\/h6>\n

Firefox plugin that lists Amazon S3 Buckets found in requests.<\/p>\n<\/div><\/div>\n

\n

\"s3cario<\/p>\n

\n
s3cario<\/a><\/h6>\n

Performs buckets checks from a given list of subdomains.<\/p>\n<\/div><\/div>\n

\n

\"S3Cruze<\/p>\n

\n
S3Cruze<\/a><\/h6>\n

All-in-one AWS S3 bucket tool.<\/p>\n<\/div><\/div>\n

\n

\"s3reverse<\/p>\n

\n
s3reverse<\/a><\/h6>\n

The format of various S3 buckets is convert in one format.<\/p>\n<\/div><\/div>\n

\n

\"S3Scanner<\/p>\n

\n
S3Scanner<\/a><\/h6>\n

Scan for open S3 buckets and dump the contents.<\/p>\n<\/div><\/div>\n

\n

\"s3tk<\/p>\n

\n
s3tk<\/a><\/h6>\n

A security toolkit for Amazon S3.<\/p>\n<\/div><\/div>\n

\n

\"S3Viewer<\/p>\n<\/p><\/div>\n

\n

\"safecopy<\/p>\n

\n
safecopy<\/a><\/h6>\n

Burp Extension for copying requests safely.<\/p>\n<\/div><\/div>\n

\n

\"Sandcastle<\/p>\n

\n
Sandcastle<\/a><\/h6>\n

A Python script for AWS S3 bucket enumeration.<\/p>\n<\/div><\/div>\n

\n

\"scan-check-builder<\/p>\n

\n
scan-check-builder<\/a><\/h6>\n

Burp Suite extension which helps to improve the active and passive scanner by yourself.<\/p>\n<\/div><\/div>\n

\n

\"ScanCannon<\/p>\n

\n
ScanCannon<\/a><\/h6>\n

Combines the speed of masscan with the reliability and detailed enumeration of nmap.<\/p>\n<\/div><\/div>\n

\n

\"Scilla<\/p>\n

\n
Scilla<\/a><\/h6>\n

Information Gathering tool – DNS \/ Subdomains \/ Ports \/ Directories enumeration.<\/p>\n<\/div><\/div>\n

\n

\"Scout<\/p>\n

\n
Scout<\/a><\/h6>\n

Discover a web server’s undisclosed files, directories and VHOSTs.<\/p>\n<\/div><\/div>\n

\n

\"ScrapeIn<\/p>\n

\n
ScrapeIn<\/a><\/h6>\n

Harvest employee email addresses from a specific company through LinkedIn.<\/p>\n<\/div><\/div>\n

\n

\"ScreenShooter<\/p>\n

\n
ScreenShooter<\/a><\/h6>\n

Convert your masscan\/subdomain-scan results into screenshots for better analysis.<\/p>\n<\/div><\/div>\n

\n

\"Screenshoteer<\/p>\n

\n
Screenshoteer<\/a><\/h6>\n

Makes web screenshots and mobile emulations from the command line.<\/p>\n<\/div><\/div>\n

\n

\"Scrying<\/p>\n

\n
Scrying<\/a><\/h6>\n

Collects RDP, web and VNC screenshots all in one place.<\/p>\n<\/div><\/div>\n

\n

\"SearchSploit<\/p>\n

\n
SearchSploit<\/a><\/h6>\n

Cli tool for Exploit-DB that also allows you to take a copy of Exploit Database with you.<\/p>\n<\/div><\/div>\n

\n

\"SecLists<\/p>\n

\n
SecLists<\/a><\/h6>\n

Collection of multiple types of lists used during security assessments, collected in one place.<\/p>\n<\/div><\/div>\n

\n

\"Second<\/p>\n<\/p><\/div>\n

\n

\"secret-bridge<\/p>\n<\/p><\/div>\n

\n

\"SecretMagpie<\/p>\n<\/p><\/div>\n

\n

\"SecurityTrails<\/p>\n<\/p><\/div>\n

\n

\"See-SURF<\/p>\n

\n
See-SURF<\/a><\/h6>\n

Detect Vulnerable SSRF parameters.<\/p>\n<\/div><\/div>\n

\n

\"sentrySSRF<\/p>\n

\n
sentrySSRF<\/a><\/h6>\n

Searching for Sentry config on page or in Javascript files and check blind SSRF.<\/p>\n<\/div><\/div>\n

\n

\"Shadow<\/p>\n

\n
Shadow Workers<\/a><\/h6>\n

C2 and proxy designed to help in the exploitation of XSS and malicious Service Workers.<\/p>\n<\/div><\/div>\n

\n

\"ShapeShifter<\/p>\n<\/p><\/div>\n

\n

\"SharpHose<\/p>\n

\n
SharpHose<\/a><\/h6>\n

Asynchronous password spraying tool for Windows environments.<\/p>\n<\/div><\/div>\n

\n

\"Shelling<\/p>\n

\n
Shelling<\/a><\/h6>\n

A comprehensive OS command injection payload generator.<\/p>\n<\/div><\/div>\n

\n

\"Shells<\/p>\n

\n
Shells<\/a><\/h6>\n

A script for generating common revshells fast and easily.<\/p>\n<\/div><\/div>\n

\n

\"Sherlock<\/p>\n

\n
Sherlock<\/a><\/h6>\n

Hunt down social media accounts by username across social networks.<\/p>\n<\/div><\/div>\n

\n

\"shhgit<\/p>\n

\n
shhgit<\/a><\/h6>\n

Secrets detection for your GitHub, GitLab and Bitbucket repositories.<\/p>\n<\/div><\/div>\n

\n

\"Shotlooter<\/p>\n

\n
Shotlooter<\/a><\/h6>\n

Find sensitive data inside the screenshots uploaded to prnt.sc.<\/p>\n<\/div><\/div>\n

\n

\"shuffleDNS<\/p>\n

\n
shuffleDNS<\/a><\/h6>\n

Enumerate valid subdomains using active bruteforce and DNS resolution.<\/p>\n<\/div><\/div>\n

\n

\"Simple<\/p>\n<\/p><\/div>\n

\n

\"SiteBroker<\/p>\n

\n
SiteBroker<\/a><\/h6>\n

Utility for information gathering and penetration testing automation.<\/p>\n<\/div><\/div>\n

\n

\"skipfish<\/p>\n

\n
skipfish<\/a><\/h6>\n

Web application security scanner.<\/p>\n<\/div><\/div>\n

\n

\"Slack<\/p>\n

\n
Slack Watchman<\/a><\/h6>\n

Monitoring your Slack workspaces for sensitive informations.<\/p>\n<\/div><\/div>\n

\n

\"Sleepy<\/p>\n<\/p><\/div>\n

\n

\"SleuthQL<\/p>\n

\n
SleuthQL<\/a><\/h6>\n

Burp History parsing tool to discover potential SQL injection points.<\/p>\n<\/div><\/div>\n

\n

\"Slurp<\/p>\n

\n
Slurp<\/a><\/h6>\n

A blazing fast & feature rich Amazon S3 bucket enumerator.<\/p>\n<\/div><\/div>\n

\n

\"smap<\/p>\n

\n
smap<\/a><\/h6>\n

A drop-in replacement for Nmap powered by shodan.io.<\/p>\n<\/div><\/div>\n

\n

\"SMBploit<\/p>\n

\n
SMBploit<\/a><\/h6>\n

Offensive tool to scan & exploit vulnerabilities in Windows over SMB using Metasploit.<\/p>\n<\/div><\/div>\n

\n

\"Smogcloud<\/p>\n

\n
Smogcloud<\/a><\/h6>\n

Find cloud assets that no one wants exposed.<\/p>\n<\/div><\/div>\n

\n

\"Smuggler<\/p>\n

\n
Smuggler<\/a><\/h6>\n

An HTTP Request Smuggling \/ Desync testing tool.<\/p>\n<\/div><\/div>\n

\n

\"Sn1per<\/p>\n

\n
Sn1per<\/a><\/h6>\n

Attack Surface Management Platform.<\/p>\n<\/div><\/div>\n

\n

\"Sniff-Paste<\/p>\n<\/p><\/div>\n

\n

\"sns<\/p>\n

\n
sns<\/a><\/h6>\n

IIS shortname scanner written in Go.<\/p>\n<\/div><\/div>\n

\n

\"SonarSearch<\/p>\n<\/p><\/div>\n

\n

\"Sourcegraph<\/p>\n

\n
Sourcegraph<\/a><\/h6>\n

Search millions of open source repositories.<\/p>\n<\/div><\/div>\n

\n

\"spaces-finder<\/p>\n

\n
spaces-finder<\/a><\/h6>\n

A tool to hunt for publicly accessible DigitalOcean Spaces.<\/p>\n<\/div><\/div>\n

\n

\"SpiderFoot<\/p>\n

\n
SpiderFoot<\/a><\/h6>\n

Automates OSINT for threat intelligence and mapping your attack surface.<\/p>\n<\/div><\/div>\n

\n

\"Spoofy<\/p>\n

\n
Spoofy<\/a><\/h6>\n

Checks if a list of domains can be spoofed based on SPF and DMARC records.<\/p>\n<\/div><\/div>\n

\n

\"SprayCannon<\/p>\n

\n
SprayCannon<\/a><\/h6>\n

Fast multithreaded password spraying tool with backend database.<\/p>\n<\/div><\/div>\n

\n

\"SQLi-Hunter<\/p>\n

\n
SQLi-Hunter<\/a><\/h6>\n

Simple HTTP(S) proxy server and a SQLMAP API wrapper that makes digging SQLi easy.<\/p>\n<\/div><\/div>\n

\n

\"sqlipy<\/p>\n

\n
sqlipy<\/a><\/h6>\n

Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.<\/p>\n<\/div><\/div>\n

\n

\"SQLiScanner<\/p>\n

\n
SQLiScanner<\/a><\/h6>\n

Automatic SQL injection with Charles and sqlmap API.<\/p>\n<\/div><\/div>\n

\n

\"SQLiv<\/p>\n

\n
SQLiv<\/a><\/h6>\n

Massive SQL injection vulnerability scanner.<\/p>\n<\/div><\/div>\n

\n

\"sqlmap<\/p>\n

\n
sqlmap<\/a><\/h6>\n

Automatic SQL injection and database takeover tool.<\/p>\n<\/div><\/div>\n

\n

\"SqlmapDnsCollaborator<\/p>\n<\/p><\/div>\n

\n

\"SQLninja<\/p>\n

\n
SQLninja<\/a><\/h6>\n

Exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server.<\/p>\n<\/div><\/div>\n

\n

\"SQLRecon<\/p>\n

\n
SQLRecon<\/a><\/h6>\n

A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation.<\/p>\n<\/div><\/div>\n

\n

\"SQLTruncSanner<\/p>\n

\n
SQLTruncSanner<\/a><\/h6>\n

Messy BurpSuite plugin for SQL Truncation vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"SSH<\/p>\n<\/p><\/div>\n

\n

\"ssh-audit<\/p>\n

\n
ssh-audit<\/a><\/h6>\n

SSH server auditing: banner, key exchange, encryption, compatibility, security…<\/p>\n<\/div><\/div>\n

\n

\"sslscan<\/p>\n

\n
sslscan<\/a><\/h6>\n

Tests SSL\/TLS enabled services to discover supported cipher suites.<\/p>\n<\/div><\/div>\n

\n

\"SSLyze<\/p>\n

\n
SSLyze<\/a><\/h6>\n

Fast and powerful SSL\/TLS scanning library.<\/p>\n<\/div><\/div>\n

\n

\"SSRF<\/p>\n<\/p><\/div>\n

\n

\"SSRF<\/p>\n<\/p><\/div>\n

\n

\"SSRFire<\/p>\n

\n
SSRFire<\/a><\/h6>\n

An automated SSRF finder. Just give the domain name and your server and chill!<\/p>\n<\/div><\/div>\n

\n

\"SSRFmap<\/p>\n

\n
SSRFmap<\/a><\/h6>\n

Automatic SSRF fuzzer and exploitation tool.<\/p>\n<\/div><\/div>\n

\n

\"SSRFTest<\/p>\n<\/p><\/div>\n

\n

\"StaCoAn<\/p>\n

\n
StaCoAn<\/a><\/h6>\n

Crossplatform tool which help to perform static code analysis on mobile applications.<\/p>\n<\/div><\/div>\n

\n

\"steghide<\/p>\n

\n
steghide<\/a><\/h6>\n

Steganography program that hides secrets in the least significant bits of a file.<\/p>\n<\/div><\/div>\n

\n

\"Stepper<\/p>\n

\n
Stepper<\/a><\/h6>\n

A natural evolution of Burp Suite’s Repeater tool.<\/p>\n<\/div><\/div>\n

\n

\"ST\u00d6K<\/p>\n<\/p><\/div>\n

\n

\"sub-domain<\/p>\n<\/p><\/div>\n

\n

\"Sub3<\/p>\n

\n
Sub3 Suite<\/a><\/h6>\n

A free, open source, cross platform Intelligence gathering tool.<\/p>\n<\/div><\/div>\n

\n

\"SubBrute<\/p>\n

\n
SubBrute<\/a><\/h6>\n

A DNS meta-query spider that enumerates DNS records, and subdomains.<\/p>\n<\/div><\/div>\n

\n

\"SubDomainizer<\/p>\n

\n
SubDomainizer<\/a><\/h6>\n

A tool to find subdomains and interesting things hidden inside.<\/p>\n<\/div><\/div>\n

\n

\"Subfinder<\/p>\n

\n
Subfinder<\/a><\/h6>\n

Discovery tool that discovers valid subdomains for websites.<\/p>\n<\/div><\/div>\n

\n

\"subHijack<\/p>\n

\n
subHijack<\/a><\/h6>\n

Hijacking forgotten & misconfigured subdomains.<\/p>\n<\/div><\/div>\n

\n

\"Subjack<\/p>\n

\n
Subjack<\/a><\/h6>\n

Subdomain Takeover tool written in Go.<\/p>\n<\/div><\/div>\n

\n

\"Sublert<\/p>\n

\n
Sublert<\/a><\/h6>\n

Monitor new subdomains deployed by specific organizations and issued TLS\/SSL certificate.<\/p>\n<\/div><\/div>\n

\n

\"Sublist3r<\/p>\n

\n
Sublist3r<\/a><\/h6>\n

Fast subdomains enumeration tool for penetration testers.<\/p>\n<\/div><\/div>\n

\n

\"SubOver<\/p>\n

\n
SubOver<\/a><\/h6>\n

A Powerful Subdomain Takeover Tool.<\/p>\n<\/div><\/div>\n

\n

\"Substr3am<\/p>\n

\n
Substr3am<\/a><\/h6>\n

Passive reconnaissance\/enumeration of interesting targets by watching for SSL certificates.<\/p>\n<\/div><\/div>\n

\n

\"subzuf<\/p>\n

\n
subzuf<\/a><\/h6>\n

A smart DNS response-guided subdomain fuzzer.<\/p>\n<\/div><\/div>\n

\n

\"Sudomy<\/p>\n

\n
Sudomy<\/a><\/h6>\n

Collects subdomains and analyzes domains performing automated reconnaissance.<\/p>\n<\/div><\/div>\n

\n

\"SweetPotato<\/p>\n

\n
SweetPotato<\/a><\/h6>\n

A collection of various Windows privilege escalation techniques from service accounts to SYSTEM.<\/p>\n<\/div><\/div>\n

\n

\"takeover<\/p>\n

\n
takeover<\/a><\/h6>\n

A tool for testing subdomain takeover possibilities at a mass scale.<\/p>\n<\/div><\/div>\n

\n

\"Teh<\/p>\n<\/p><\/div>\n

\n

\"Th3inspector<\/p>\n<\/p><\/div>\n

\n

\"The<\/p>\n<\/p><\/div>\n

\n

\"The<\/p>\n<\/p><\/div>\n

\n

\"The<\/p>\n<\/p><\/div>\n

\n

\"TheftFuzzer<\/p>\n

\n
TheftFuzzer<\/a><\/h6>\n

Fuzz Cross-Origin Resource Sharing implementations for common misconfigurations.<\/p>\n<\/div><\/div>\n

\n

\"theHarvester<\/p>\n<\/p><\/div>\n

\n

\"tko-subs<\/p>\n

\n
tko-subs<\/a><\/h6>\n

A tool that can help detect and takeover subdomains with dead DNS records.<\/p>\n<\/div><\/div>\n

\n

\"TLD<\/p>\n

\n
TLD Scanner<\/a><\/h6>\n

Scan all possible TLD’s for a given domain name.<\/p>\n<\/div><\/div>\n

\n

\"tlsx<\/p>\n

\n
tlsx<\/a><\/h6>\n

Fast and configurable TLS grabber focused on TLS based data collection.<\/p>\n<\/div><\/div>\n

\n

\"tplmap<\/p>\n

\n
tplmap<\/a><\/h6>\n

Server-Side Template Injection and Code Injection Detection and Exploitation Tool.<\/p>\n<\/div><\/div>\n

\n

\"Tracy<\/p>\n

\n
Tracy<\/a><\/h6>\n

Assists with finding all sinks and sources of a webapp and display the results in a nice way.<\/p>\n<\/div><\/div>\n

\n

\"Transformations<\/p>\n

\n
Transformations<\/a><\/h6>\n

Understand how input is transformed on a system, which can help to craft payloads.<\/p>\n<\/div><\/div>\n

\n

\"Trishul<\/p>\n

\n
Trishul<\/a><\/h6>\n

Burp Suite Extension to hunt for common vulnerabilities found in websites.<\/p>\n<\/div><\/div>\n

\n

\"TruffleHog<\/p>\n<\/p><\/div>\n

\n

\"TugaRecon<\/p>\n

\n
TugaRecon<\/a><\/h6>\n

Subdomains enumeration tool for penetration testers.<\/p>\n<\/div><\/div>\n

\n

\"Turbo<\/p>\n

\n
Turbo Intruder<\/a><\/h6>\n

Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.<\/p>\n<\/div><\/div>\n

\n

\"Turbolist3r<\/p>\n

\n
Turbolist3r<\/a><\/h6>\n

Subdomain enumeration tool with analysis features for discovered domains.<\/p>\n<\/div><\/div>\n

\n

\"uncover<\/p>\n

\n
uncover<\/a><\/h6>\n

Quickly discover exposed hosts on the internet using multiple search engines.<\/p>\n<\/div><\/div>\n

\n

\"unfurl<\/p>\n

\n
unfurl<\/a><\/h6>\n

An Entropy-Based Link Vulnerability Tool.<\/p>\n<\/div><\/div>\n

\n

\"UploadScanner<\/p>\n<\/p><\/div>\n

\n

\"urlgrab<\/p>\n

\n
urlgrab<\/a><\/h6>\n

A golang utility to spider through a website searching for additional links.<\/p>\n<\/div><\/div>\n

\n

\"uro<\/p>\n

\n
uro<\/a><\/h6>\n

Declutters url lists for crawling\/pentesting.<\/p>\n<\/div><\/div>\n

\n

\"userefuzz<\/p>\n

\n
userefuzz<\/a><\/h6>\n

User-Agent, X-Forwarded-For and Referer SQLI Fuzzer.<\/p>\n<\/div><\/div>\n

\n

\"vaf<\/p>\n

\n
vaf<\/a><\/h6>\n

Cross-platform very advanced and fast web fuzzer written in nim.<\/p>\n<\/div><\/div>\n

\n

\"vaya-ciego-nen<\/p>\n

\n
vaya-ciego-nen<\/a><\/h6>\n

Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"Venom<\/p>\n

\n
Venom<\/a><\/h6>\n

Popular Pentesting scanner for SQLi\/XSS\/LFI\/RFI and other Vulns.<\/p>\n<\/div><\/div>\n

\n

\"vhosts-sieve<\/p>\n

\n
vhosts-sieve<\/a><\/h6>\n

Searching for virtual hosts among non-resolvable domains.<\/p>\n<\/div><\/div>\n

\n

\"VHostScan<\/p>\n

\n
VHostScan<\/a><\/h6>\n

Virtual host scanner that performs reverse lookups.<\/p>\n<\/div><\/div>\n

\n

\"Virtual<\/p>\n<\/p><\/div>\n

\n

\"w3af<\/p>\n

\n
w3af<\/a><\/h6>\n

Web Application Attack and Audit Framework.<\/p>\n<\/div><\/div>\n

\n

\"wafw00f<\/p>\n

\n
wafw00f<\/a><\/h6>\n

Identify and fingerprint Web Application Firewall products protecting a website.<\/p>\n<\/div><\/div>\n

\n

\"Wapiti<\/p>\n

\n
Wapiti<\/a><\/h6>\n

The web-application vulnerability scanner.<\/p>\n<\/div><\/div>\n

\n

\"Wappalyzer<\/p>\n<\/p><\/div>\n

\n

\"Wayback<\/p>\n<\/p><\/div>\n

\n

\"waybackSqliScanner<\/p>\n

\n
waybackSqliScanner<\/a><\/h6>\n

Gather urls from wayback machine then test each GET parameter for SQL injection.<\/p>\n<\/div><\/div>\n

\n

\"waybackurls<\/p>\n

\n
waybackurls<\/a><\/h6>\n

Fetch all the URLs that the Wayback Machine knows about for a domain.<\/p>\n<\/div><\/div>\n

\n

\"Waymore<\/p>\n

\n
Waymore<\/a><\/h6>\n

Find way more from the Wayback Machine!<\/p>\n<\/div><\/div>\n

\n

\"Web<\/p>\n<\/p><\/div>\n

\n

\"webanalyze<\/p>\n

\n
webanalyze<\/a><\/h6>\n

Uncovers technologies used on websites to automate mass scanning.<\/p>\n<\/div><\/div>\n

\n

\"webscreenshot<\/p>\n<\/p><\/div>\n

\n

\"websy<\/p>\n

\n
websy<\/a><\/h6>\n

Keep an eye on your targets to get quickly notified for any change they push on their server.<\/p>\n<\/div><\/div>\n

\n

\"WeirdAAL<\/p>\n<\/p><\/div>\n

\n

\"Wfuzz<\/p>\n

\n
Wfuzz<\/a><\/h6>\n

Web application fuzzer.<\/p>\n<\/div><\/div>\n

\n

\"WhatsMyName<\/p>\n<\/p><\/div>\n

\n

\"WhatWeb<\/p>\n

\n
WhatWeb<\/a><\/h6>\n

Next generation web scanner.<\/p>\n<\/div><\/div>\n

\n

\"Whispers<\/p>\n

\n
Whispers<\/a><\/h6>\n

Identify hardcoded secrets in static structured text.<\/p>\n<\/div><\/div>\n

\n

\"wifipumpkin3<\/p>\n

\n
wifipumpkin3<\/a><\/h6>\n

Powerful framework for rogue access point attack.<\/p>\n<\/div><\/div>\n

\n

\"wifite<\/p>\n

\n
wifite<\/a><\/h6>\n

Runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches!<\/p>\n<\/div><\/div>\n

\n

\"windapsearch<\/p>\n

\n
windapsearch<\/a><\/h6>\n

Enumerate users, groups and computers from a Windows domain through LDAP queries.<\/p>\n<\/div><\/div>\n

\n

\"Wireshark<\/p>\n

\n
Wireshark<\/a><\/h6>\n

Network sniffer that captures and analyzes packets off the wire.<\/p>\n<\/div><\/div>\n

\n

\"WitnessMe<\/p>\n

\n
WitnessMe<\/a><\/h6>\n

Web Inventory tool, takes screenshots and provides some extra bells&whistles to make life easier.<\/p>\n<\/div><\/div>\n

\n

\"Words<\/p>\n

\n
Words Scraper<\/a><\/h6>\n

Selenium based web scraper to generate passwords list.<\/p>\n<\/div><\/div>\n

\n

\"WPRecon<\/p>\n

\n
WPRecon<\/a><\/h6>\n

Tool for the recognition of vulnerabilities and blackbox information for WordPress.<\/p>\n<\/div><\/div>\n

\n

\"WPScan<\/p>\n

\n
WPScan<\/a><\/h6>\n

WPScan WordPress Security Scanner<\/p>\n<\/div><\/div>\n

\n

\"WPSpider<\/p>\n

\n
WPSpider<\/a><\/h6>\n

A centralized dashboard for running and scheduling WordPress scans powered by WPScan utility.<\/p>\n<\/div><\/div>\n

\n

\"WSDL<\/p>\n

\n
WSDL Wizard<\/a><\/h6>\n

Burp Suite plugin to detect current and discover new WSDL files.<\/p>\n<\/div><\/div>\n

\n

\"X8<\/p>\n

\n
X8<\/a><\/h6>\n

Hidden parameters discovery suite.<\/p>\n<\/div><\/div>\n

\n

\"XFFenum<\/p>\n

\n
XFFenum<\/a><\/h6>\n

X-Forwarded-For [403 forbidden] enumeration.<\/p>\n<\/div><\/div>\n

\n

\"xnLinkFinder<\/p>\n

\n
xnLinkFinder<\/a><\/h6>\n

A python tool used to discover endpoints and potential parameters for a given target.<\/p>\n<\/div><\/div>\n

\n

\"xray<\/p>\n

\n
xray<\/a><\/h6>\n

Security assessment tool that supports common web security issue scanning and custom PoC.<\/p>\n<\/div><\/div>\n

\n

\"XSpear<\/p>\n

\n
XSpear<\/a><\/h6>\n

Powerfull XSS Scanning and Parameter analysis tool&gem.<\/p>\n<\/div><\/div>\n

\n

\"XSRFProbe<\/p>\n

\n
XSRFProbe<\/a><\/h6>\n

The Prime Cross Site Request Forgery Audit and Exploitation Toolkit.<\/p>\n<\/div><\/div>\n

\n

\"XSS<\/p>\n

\n
XSS Hunter Express<\/a><\/h6>\n

The fastest way to set up XSS Hunter to test and find blind XSS vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"XSS<\/p>\n

\n
XSS Radar<\/a><\/h6>\n

A Chrome extension for fast and easy XSS fuzzing.<\/p>\n<\/div><\/div>\n

\n

\"Xss-Sql-Fuzz<\/p>\n

\n
Xss-Sql-Fuzz<\/a><\/h6>\n

Burp Suite plugin for XSS and SQLi which add our payload to all parameters with one click.<\/p>\n<\/div><\/div>\n

\n

\"XSS'OR<\/p>\n<\/p><\/div>\n

\n

\"xss2png<\/p>\n

\n
xss2png<\/a><\/h6>\n

PNG IDAT chunks XSS payload generator.<\/p>\n<\/div><\/div>\n

\n

\"XSSCon<\/p>\n

\n
XSSCon<\/a><\/h6>\n

Simple XSS Scanner tool.<\/p>\n<\/div><\/div>\n

\n

\"xsscrapy<\/p>\n

\n
xsscrapy<\/a><\/h6>\n

Fast, thorough, XSS\/SQLi spider.<\/p>\n<\/div><\/div>\n

\n

\"XSSer<\/p>\n

\n
XSSer<\/a><\/h6>\n

Automatic framework to detect, exploit and report XSS vulnerabilities in web-based applications.<\/p>\n<\/div><\/div>\n

\n

\"XSSMap<\/p>\n

\n
XSSMap<\/a><\/h6>\n

Detect XSS vulnerability in Web Applications.<\/p>\n<\/div><\/div>\n

\n

\"XSStrike<\/p>\n<\/p><\/div>\n

\n

\"xssValidator<\/p>\n

\n
xssValidator<\/a><\/h6>\n

A Burp Intruder extender designed for automation and validation of XSS vulnerabilities.<\/p>\n<\/div><\/div>\n

\n

\"XSSwagger<\/p>\n

\n
XSSwagger<\/a><\/h6>\n

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks.<\/p>\n<\/div><\/div>\n

\n

\"XXE-FTP<\/p>\n

\n
XXE-FTP<\/a><\/h6>\n

A mini webserver with FTP support for XXE payloads.<\/p>\n<\/div><\/div>\n

\n

\"XXEinjector<\/p>\n

\n
XXEinjector<\/a><\/h6>\n

Exploitation of XXE vulnerability using direct and different out of band methods.<\/p>\n<\/div><\/div>\n

\n

\"xxeserv<\/p>\n

\n
xxeserv<\/a><\/h6>\n

A mini webserver with FTP support for XXE payloads.<\/p>\n<\/div><\/div>\n

\n

\"XXExploiter<\/p>\n<\/p><\/div>\n

\n

\"Yet<\/p>\n

\n
Yet Another Robber<\/a><\/h6>\n

Yar is a tool for plunderin’ organizations, users and\/or repositories…<\/p>\n<\/div><\/div>\n

\n

\"Yet<\/p>\n

\n
Yet Another Sniffer<\/a><\/h6>\n

A network analyzer that make easy to extract informations about network traffic.<\/p>\n<\/div><\/div>\n

\n

\"Yoga<\/p>\n

\n
Yoga<\/a><\/h6>\n

Your OSINT Graphical Analyzer.<\/p>\n<\/div><\/div>\n

\n

\"ysoserial<\/p>\n

\n
ysoserial<\/a><\/h6>\n

Generates payloads that exploit unsafe Java object deserialization.<\/p>\n<\/div><\/div>\n

\n

\"ysoserial.net<\/p>\n

\n
ysoserial.net<\/a><\/h6>\n

Deserialization payload generator for a variety of .NET formatters.<\/p>\n<\/div><\/div>\n

\n

\"Zed<\/p>\n<\/p><\/div>\n<\/div>\n

Read More<\/a>
\n Tyisha Grisby<\/p>\n","protected":false},"excerpt":{"rendered":"

0d1n Tool for automating customized attacks against web applications. ActiveScan++ Extends Burp Suite’s active and passive scanning capabilities. Acunetix Quickly find and fix the vulnerabilities that put your web applications at risk of attack. ADAPE Script Active Directory assessment and privilege escalation script. ADenum Find misconfiguration through LDAP to exploit weaknesses with Kerberos. ADReaper Enumerate<\/p>\n","protected":false},"author":1,"featured_media":599746,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[118236,46,682],"tags":[],"class_list":{"0":"post-599745","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-offsec","8":"category-technology","9":"category-tools"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/599745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=599745"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/599745\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/599746"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=599745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=599745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=599745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}