1ndianl33t Goto Github PK

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

burl

A Broken-URL Checker

burpbounty

Burp Bounty (Scan Check Builder in BApps Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

certsubs

cf-check

Check an IP is Owned by Cloudflare

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 150 other CMSs

cnames

take a list of resolved subdomains and output any corresponding CNAMES en masse.

command-mobile-penetration-testing-cheatsheet

Mobile penetration testing android & iOS command cheatsheet

commix

Automated All-in-One OS command injection and exploitation tool.

csp

Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.

cspparse

A tool to evaluate Content Security Policies.

ctf-hacks

CTF Golang tools

ctf-tools

Tools to Capture The Flag in golang

dalfox

DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

dirbuster_wordlist

dirlstr

Finds Directory Listings or open S3 buckets from a list of URLs

dirsearch

Web path scanner

discord.sh

Write-only command-line Discord webhook integration written in 100% Bash script

dnsdig

Perform Multiple Dns queries

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

dotfiles

.bash_profile , .bashrc , .vimrc etc

echopwn

Recon Automation for hackers by hackers

facebook-ads

dbt data models for facebook ads

fff

The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.

ffuf

Fast web fuzzer written in Go

filter-unresolved

takes a list of subdomains (i.e. CNAMES) and determines if they DON'T resolve

fockcache

FockCache - Minimalized Test Cache Poisoning

fprobe

Take a list of domains/subdomains and probe for working http/https server.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.