csmagee99 Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

aquatone

A Tool for Domain Flyovers

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

assetfinder

Find domains and subdomains related to a given domain

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

aws-incident-response-runbooks

axiom-1

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

bug-bounty

Ressources for bug bounty hunting

bugbountytoolkit

A multi-platform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.

cdc

changeme

A default credential scanner.

cloud-purpleteam-demo

A Purple-Team Approach to Exploring AWS Security Services & Capabilities

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

commonspeak

Content discovery wordlists generated using BigQuery

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

content-aiops-essentials

John's AIOps Course

corsy

CORS Misconfiguration Scanner

deadshot

Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository

developer-roadmap

Roadmap to becoming a web developer in 2020

dirsearch

Web path scanner

dnmasscan

A script that can resolve an input file of domains and scan them with masscan

dnscewl

A DNS Bruteforcing Wordlist Generator

dnsobserver

A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack.

domlink

A tool to link a domain with registered organisation names and emails, to other domains.

dorks-eye

Dorks Eye Google Hacking Dork Scraping and Searching Script. Dorks Eye is a script I made in python 3. With this tool, you can easily find Google Dorks. Dork Eye collects potentially vulnerable web pages and applications on the Internet or other awesome info that is picked up by Google's search bots. Author: Jolanda de Koff

dotfiles

~/.dotfiles

ec2_inventory

A simple script that uses uses the Amazon Web Services Boto3 python module to generate a CSV file of all EC2 Instances.

fff

The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework