redteam-tools Goto Github PK

amass

In-depth subdomain enumeration written in Go

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

burp-vulners-scanner

Vulnerability scanner based on vulners.com search API

bxss

bXSS is a simple Blind XSS application adapted from https://cure53.de/m

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

domlink

A tool to link a domain with registered organisation names and emails, to other domains.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

ezxss

ezXSS is an easy way to test (blind) XSS

gitminer

Tool for advanced mining for content on Github

gobuster

Directory/file & DNS busting tool written in Go

hunt

jsparser

linkfinder

A python script that finds endpoints in JavaScript files

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

nsec3map

a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain

parameth

This tool can be used to brute discover GET and POST parameters

raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

robotsdisallowed

A harvest of the Disallowed directories from the robots.txt files of the world's top websites.

s3scanner

Scan for open AWS S3 buckets and dump the contents

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.