redhuntlabs Goto Github PK

antisquat

awesome-asset-discovery

List of Awesome Asset Discovery Resources

bucketloot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

burpsuite-asset_discover

Burp Suite extension to discover assets from HTTP response.

burpsuite-asset_history

confluentpwn

Atlassian confluence unauthenticated ONGL injection remote code execution scanner (CVE-2022-26134).

damntls

A "really" damned TLS library.

httploot

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.

hunt4spring

A "Spring4Shell" vulnerability scanner.

kubestalk

KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.

log4jhunt

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

maltego-scripts

octopii

An AI-powered Personal Identifiable Information (PII) scanner.

one-liner-pocs

project-resonance

project-resonance-website

Internet wide surveys to study and understand the security state of Internet as well as facilitate research into various components / topics which originate as a result of our surveys.

redhunt-os

Virtual Machine for Adversary Emulation and Threat Hunting