area71 Goto Github PK

nikto

Nikto web server scanner

ninjref

Ninjref is a fast & light tool for finding urls with reflected parameters from wayback & CommonCrawl it's use threads in threads to optimize it's speed and use Wayback resumption key to divide scan in multiple parts to handle large scan and it's use direct filters on api to get only filtered data from api to do less work on your system.

nodexp

NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities

parth

Heuristic Vulnerable Parameter Scanner

pastebin-scraper

Live-scraping pastebin to fight boredom.

pastebin_scraper

photon

Incredibly fast crawler designed for OSINT.

phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

pnwgen

A very flexible phone number wordlist generator

pwnxss

PwnXSS: Vulnerability (XSS) scanner exploit

pyfilebuster

A fast web fuzzer written in Python. With support for AWS S3 buckets.

qrljacker

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

reconcobra

Ultimate Recon Software for Information Gathering

recondog

Reconnaissance Swiss Army Knife

red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

s3scanner

Scan for open AWS S3 buckets and dump the contents

s7scan

a pentest scanner / 一个漏洞综合利用工具轮子，大佬请忽略

scadapass

SCADA StrangeLove Default/Hardcoded Passwords List

sdnpwn

An SDN penetration testing toolkit

shellver

Reverse Shell Cheat Sheet TooL

silver

Mass scan IPs for vulnerable services

sitebroker

A cross-platform python based utility for information gathering and penetration testing automation!

sixnet-tools

Tool for exploiting sixnet RTUs

smbmap

SMBMap is a handy SMB enumeration tool

socialpwned

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to find possible credentials leaks in PwnDB.

sshpry2.0

SSHPry v2 - Spy & Control os SSH Connected client's TTY

striker

Striker is an offensive information and vulnerability scanner.

theharvester

E-mails, subdomains and names Harvester - OSINT