392 lines
26 KiB
JSON
392 lines
26 KiB
JSON
{
|
|
"Amass": {
|
|
"Data": "| Discovery/DOMAIN | [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"Arjun": {
|
|
"Data": "| Discovery/HTTP | [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. |  |  |",
|
|
"Method": "HTTP",
|
|
"Type": "Discovery"
|
|
},
|
|
"BurpSuite": {
|
|
"Data": "| Army-Knife/BURP | [BurpSuite](https://portswigger.net/burp) | It's Awesome| | |",
|
|
"Method": "BURP",
|
|
"Type": "Army-Knife"
|
|
},
|
|
"CSP Evaluator": {
|
|
"Data": "| Utility/CSP | [CSP Evaluator](https://csp-evaluator.withgoogle.com) | Online CSP Evaluator from google| | |",
|
|
"Method": "CSP",
|
|
"Type": "Utility"
|
|
},
|
|
"Corsy": {
|
|
"Data": "| Scanner/CORS | [Corsy](https://github.com/s0md3v/Corsy) | CORS Misconfiguration Scanner |  |  |",
|
|
"Method": "CORS",
|
|
"Type": "Scanner"
|
|
},
|
|
"DNSDumpster": {
|
|
"Data": "| Discovery/DNS | [DNSDumpster](https://dnsdumpster.com) | Online dns recon \u0026 research, find \u0026 lookup dns records| | |",
|
|
"Method": "DNS",
|
|
"Type": "Discovery"
|
|
},
|
|
"GitMiner": {
|
|
"Data": "| Discovery/GIT | [GitMiner](https://github.com/UnkL4b/GitMiner) | Tool for advanced mining for content on Github |  |  |",
|
|
"Method": "GIT",
|
|
"Type": "Discovery"
|
|
},
|
|
"Gopherus": {
|
|
"Data": "| Utility/VULN | [Gopherus](https://github.com/tarunkant/Gopherus) | This tool generates gopher link for exploiting SSRF and gaining RCE in various servers |  |  |",
|
|
"Method": "VULN",
|
|
"Type": "Utility"
|
|
},
|
|
"LFISuite": {
|
|
"Data": "| Scanner/LFI | [LFISuite](https://github.com/D35m0nd142/LFISuite) | Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |  |  |",
|
|
"Method": "LFI",
|
|
"Type": "Scanner"
|
|
},
|
|
"Medusa": {
|
|
"Data": "| Scanner/FUZZ | [Medusa](https://github.com/pymedusa/Medusa) | Automatic Video Library Manager for TV Shows. It watches for new episodes of your favorite shows, and when they are posted it does its magic. |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Scanner"
|
|
},
|
|
"NoSQLMap": {
|
|
"Data": "| Scanner/NOSQL | [NoSQLMap](https://github.com/codingo/NoSQLMap) | Automated NoSQL database enumeration and web application exploitation tool. |  |  |",
|
|
"Method": "NOSQL",
|
|
"Type": "Scanner"
|
|
},
|
|
"ParamSpider": {
|
|
"Data": "| Discovery/FUZZ | [ParamSpider](https://github.com/devanshbatham/ParamSpider) | Mining parameters from dark corners of Web Archives |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Discovery"
|
|
},
|
|
"Phoenix": {
|
|
"Data": "| Utility/ETC | [Phoenix](https://www.hahwul.com/p/phoenix.html) | hahwul's online tools| | |",
|
|
"Method": "ETC",
|
|
"Type": "Utility"
|
|
},
|
|
"Photon": {
|
|
"Data": "| Discovery/CRAWL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  |",
|
|
"Method": "CRAWL",
|
|
"Type": "Discovery"
|
|
},
|
|
"S3Scanner": {
|
|
"Data": "| Scanner/S3 | [S3Scanner](https://github.com/sa7mon/S3Scanner) | Scan for open AWS S3 buckets and dump the contents |  |  |",
|
|
"Method": "S3",
|
|
"Type": "Scanner"
|
|
},
|
|
"SQLNinja": {
|
|
"Data": "| Scanner/SQL | [SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja) | SQL Injection scanner| | |",
|
|
"Method": "SQL",
|
|
"Type": "Scanner"
|
|
},
|
|
"SecLists": {
|
|
"Data": "| Utility/WORD | [SecLists](https://github.com/danielmiessler/SecLists) | SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. |  |  |",
|
|
"Method": "WORD",
|
|
"Type": "Utility"
|
|
},
|
|
"SecurityTrails": {
|
|
"Data": "| Discovery/DNS | [SecurityTrails](https://securitytrails.com) | Online dns / subdomain / recon tool| | |",
|
|
"Method": "DNS",
|
|
"Type": "Discovery"
|
|
},
|
|
"SequenceDiagram": {
|
|
"Data": "| Utility/FLOW | [SequenceDiagram](https://sequencediagram.org) | Online tool for creating UML sequence diagrams| | |",
|
|
"Method": "FLOW",
|
|
"Type": "Utility"
|
|
},
|
|
"Shodan": {
|
|
"Data": "| Discovery/PORT | [Shodan](https://www.shodan.io/) | World's first search engine for Internet-connected devices| | |",
|
|
"Method": "PORT",
|
|
"Type": "Discovery"
|
|
},
|
|
"Silver": {
|
|
"Data": "| Discovery/VULN | [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services |  |  |",
|
|
"Method": "VULN",
|
|
"Type": "Discovery"
|
|
},
|
|
"Striker": {
|
|
"Data": "| Scanner/WVS | [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. |  |  |",
|
|
"Method": "WVS",
|
|
"Type": "Scanner"
|
|
},
|
|
"Sublist3r": {
|
|
"Data": "| Discovery/DOMAIN | [Sublist3r](https://github.com/aboul3la/Sublist3r) | Fast subdomains enumeration tool for penetration testers |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"VHostScan": {
|
|
"Data": "| Scanner/FUZZ | [VHostScan](https://github.com/codingo/VHostScan) | A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages. |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Scanner"
|
|
},
|
|
"XSStrike": {
|
|
"Data": "| Scanner/XSS | [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. |  |  |",
|
|
"Method": "XSS",
|
|
"Type": "Scanner"
|
|
},
|
|
"XSpear": {
|
|
"Data": "| Scanner/XSS | [XSpear](https://github.com/hahwul/XSpear) | Powerfull XSS Scanning and Parameter analysis tool\u0026gem |  |  |",
|
|
"Method": "XSS",
|
|
"Type": "Scanner"
|
|
},
|
|
"a2sv": {
|
|
"Data": "| Scanner/SSL | [a2sv](https://github.com/hahwul/a2sv) | Auto Scanning to SSL Vulnerability |  |  |",
|
|
"Method": "SSL",
|
|
"Type": "Scanner"
|
|
},
|
|
"altdns": {
|
|
"Data": "| Discovery/DOMAIN | [altdns](https://github.com/infosec-au/altdns) | Generates permutations, alterations and mutations of subdomains and then resolves them |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"anew": {
|
|
"Data": "| Utility/URL | [anew](https://github.com/tomnomnom/anew) | A tool for adding new lines to files, skipping duplicates |  |  |",
|
|
"Method": "URL",
|
|
"Type": "Utility"
|
|
},
|
|
"arachni": {
|
|
"Data": "| Scanner/WVS | [arachni](https://github.com/Arachni/arachni) | Web Application Security Scanner Framework |  |  |",
|
|
"Method": "WVS",
|
|
"Type": "Scanner"
|
|
},
|
|
"assetfinder": {
|
|
"Data": "| Discovery/DOMAIN | [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"burl": {
|
|
"Data": "| Utility/URL | [burl](https://github.com/tomnomnom/burl) | A Broken-URL Checker |  |  |",
|
|
"Method": "URL",
|
|
"Type": "Utility"
|
|
},
|
|
"cc.py": {
|
|
"Data": "| Discovery/CRAWL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of \"commoncrawl.org\" |  |  |",
|
|
"Method": "CRAWL",
|
|
"Type": "Discovery"
|
|
},
|
|
"dalfox": {
|
|
"Data": "| Scanner/XSS | [dalfox](https://github.com/hahwul/dalfox) | DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang |  |  |",
|
|
"Method": "XSS",
|
|
"Type": "Scanner"
|
|
},
|
|
"dirsearch": {
|
|
"Data": "| Discovery/FUZZ | [dirsearch](https://github.com/maurosoria/dirsearch) | Web path scanner |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Discovery"
|
|
},
|
|
"dnsprobe": {
|
|
"Data": "| Discovery/DNS | [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |  |  |",
|
|
"Method": "DNS",
|
|
"Type": "Discovery"
|
|
},
|
|
"dotdotpwn": {
|
|
"Data": "| Scanner/LFI | [dotdotpwn](https://github.com/wireghoul/dotdotpwn) | DotDotPwn - The Directory Traversal Fuzzer |  |  |",
|
|
"Method": "LFI",
|
|
"Type": "Scanner"
|
|
},
|
|
"ffuf": {
|
|
"Data": "| Scanner/FUZZ | [ffuf](https://github.com/ffuf/ffuf) | Fast web fuzzer written in Go |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Scanner"
|
|
},
|
|
"findomain": {
|
|
"Data": "| Discovery/DOMAIN | [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"fzf": {
|
|
"Data": "| Utility/FIND | [fzf](https://github.com/junegunn/fzf) | A command-line fuzzy finder |  |  |",
|
|
"Method": "FIND",
|
|
"Type": "Utility"
|
|
},
|
|
"gf": {
|
|
"Data": "| Utility/GREP | [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things |  |  |",
|
|
"Method": "GREP",
|
|
"Type": "Utility"
|
|
},
|
|
"gitGraber": {
|
|
"Data": "| Discovery/GIT | [gitGraber](https://github.com/hisxo/gitGraber) | gitGraber |  |  |",
|
|
"Method": "GIT",
|
|
"Type": "Discovery"
|
|
},
|
|
"gitrob": {
|
|
"Data": "| Discovery/GIT | [gitrob](https://github.com/michenriksen/gitrob) | Reconnaissance tool for GitHub organizations |  |  |",
|
|
"Method": "GIT",
|
|
"Type": "Discovery"
|
|
},
|
|
"gobuster": {
|
|
"Data": "| Discovery/FUZZ | [gobuster](https://github.com/OJ/gobuster) | Directory/File, DNS and VHost busting tool written in Go |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Discovery"
|
|
},
|
|
"gospider": {
|
|
"Data": "| Discovery/CRAWL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  |",
|
|
"Method": "CRAWL",
|
|
"Type": "Discovery"
|
|
},
|
|
"gowitness": {
|
|
"Data": "| Utility/SHOT | [gowitness](https://github.com/sensepost/gowitness) | 🔍 gowitness - a golang, web screenshot utility using Chrome Headless |  |  |",
|
|
"Method": "SHOT",
|
|
"Type": "Utility"
|
|
},
|
|
"gron": {
|
|
"Data": "| Utility/JSON | [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! |  |  |",
|
|
"Method": "JSON",
|
|
"Type": "Utility"
|
|
},
|
|
"hacks": {
|
|
"Data": "| Utility/URL | [hacks](https://github.com/tomnomnom/hacks/tree/master/anti-burl) | remove bad urls |  |  |",
|
|
"Method": "URL",
|
|
"Type": "Utility"
|
|
},
|
|
"hakrawler": {
|
|
"Data": "| Discovery/CRAWL | [hakrawler](https://github.com/hakluke/hakrawler) | Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |  |  |",
|
|
"Method": "CRAWL",
|
|
"Type": "Discovery"
|
|
},
|
|
"hakrevdns": {
|
|
"Data": "| Discovery/DNS | [hakrevdns](https://github.com/hakluke/hakrevdns) | Small, fast tool for performing reverse DNS lookups en masse. |  |  |",
|
|
"Method": "DNS",
|
|
"Type": "Discovery"
|
|
},
|
|
"httprobe": {
|
|
"Data": "| Fetch/TOM | [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers |  |  |",
|
|
"Method": "TOM",
|
|
"Type": "Fetch"
|
|
},
|
|
"jaeles": {
|
|
"Type": "Army-Knife",
|
|
"Data": "| Army-Knife/JAELES | [jaeles](https://github.com/jaeles-project/jaeles) | The Swiss Army knife for automated Web Application Testing |  |  |",
|
|
"Method": "JAELES"
|
|
},
|
|
"knock": {
|
|
"Data": "| Discovery/DOMAIN | [knock](https://github.com/guelfoweb/knock) | Knock Subdomain Scan |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"masscan": {
|
|
"Data": "| Discovery/PORT | [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |  |  |",
|
|
"Method": "PORT",
|
|
"Type": "Discovery"
|
|
},
|
|
"meg": {
|
|
"Data": "| Fetch/TOM | [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts |  |  |",
|
|
"Method": "TOM",
|
|
"Type": "Fetch"
|
|
},
|
|
"naabu": {
|
|
"Data": "| Discovery/PORT | [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |  |  |",
|
|
"Method": "PORT",
|
|
"Type": "Discovery"
|
|
},
|
|
"nikto": {
|
|
"Data": "| Scanner/WVS | [nikto](https://github.com/sullo/nikto) | Nikto web server scanner |  |  |",
|
|
"Method": "WVS",
|
|
"Type": "Scanner"
|
|
},
|
|
"nmap": {
|
|
"Data": "| Discovery/PORT | [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. |  |  |",
|
|
"Method": "PORT",
|
|
"Type": "Discovery"
|
|
},
|
|
"oxml_xxe": {
|
|
"Data": "| Utility/VULN | [oxml_xxe](https://github.com/BuffaloWill/oxml_xxe) | A tool for embedding XXE/XML exploits into different filetypes |  |  |",
|
|
"Method": "VULN",
|
|
"Type": "Utility"
|
|
},
|
|
"pentest-tools": {
|
|
"Data": "| Utility/VULN | [pentest-tools](https://github.com/gwen001/pentest-tools) | Custom pentesting tools |  |  |",
|
|
"Method": "VULN",
|
|
"Type": "Utility"
|
|
},
|
|
"qsreplace": {
|
|
"Data": "| Utility/URL | [qsreplace](https://github.com/tomnomnom/qsreplace) | Accept URLs on stdin, replace all query string values with a user-supplied value |  |  |",
|
|
"Method": "URL",
|
|
"Type": "Utility"
|
|
},
|
|
"rapidscan": {
|
|
"Data": "| Scanner/WVS | [rapidscan](https://github.com/skavngr/rapidscan) | The Multi-Tool Web Vulnerability Scanner. |  |  |",
|
|
"Method": "WVS",
|
|
"Type": "Scanner"
|
|
},
|
|
"s3reverse": {
|
|
"Data": "| Utility/S3 | [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. |  |  |",
|
|
"Method": "S3",
|
|
"Type": "Utility"
|
|
},
|
|
"shuffledns": {
|
|
"Data": "| Discovery/DNS | [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. |  |  |",
|
|
"Method": "DNS",
|
|
"Type": "Discovery"
|
|
},
|
|
"sqlmap": {
|
|
"Data": "| Scanner/SQL | [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool |  |  |",
|
|
"Method": "SQL",
|
|
"Type": "Scanner"
|
|
},
|
|
"subfinder": {
|
|
"Data": "| Discovery/DOMAIN | [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"subjack": {
|
|
"Data": "| Discovery/TKOV | [subjack](https://github.com/haccer/subjack) | Subdomain Takeover tool written in Go |  |  |",
|
|
"Method": "TKOV",
|
|
"Type": "Discovery"
|
|
},
|
|
"testssl.sh": {
|
|
"Data": "| Scanner/SSL | [testssl.sh](https://github.com/drwetter/testssl.sh) | Testing TLS/SSL encryption anywhere on any port |  |  |",
|
|
"Method": "SSL",
|
|
"Type": "Scanner"
|
|
},
|
|
"thc-hydra": {
|
|
"Data": "| Scanner/FUZZ | [thc-hydra](https://github.com/vanhauser-thc/thc-hydra) | hydra |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Scanner"
|
|
},
|
|
"unfurl": {
|
|
"Data": "| Utility/URL | [unfurl](https://github.com/tomnomnom/unfurl) | Pull out bits of URLs provided on stdin |  |  |",
|
|
"Method": "URL",
|
|
"Type": "Utility"
|
|
},
|
|
"waybackurls": {
|
|
"Data": "| Discovery/URL | [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain |  |  |",
|
|
"Method": "URL",
|
|
"Type": "Discovery"
|
|
},
|
|
"websocket-connection-smuggler": {
|
|
"Data": "| Fetch/WSOCK | [websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) | websocket-connection-smuggler |  |  |",
|
|
"Method": "WSOCK",
|
|
"Type": "Fetch"
|
|
},
|
|
"wfuzz": {
|
|
"Data": "| Scanner/FUZZ | [wfuzz](https://github.com/xmendez/wfuzz) | Web application fuzzer |  |  |",
|
|
"Method": "FUZZ",
|
|
"Type": "Scanner"
|
|
},
|
|
"wpscan": {
|
|
"Data": "| Scanner/WP | [wpscan](https://github.com/wpscanteam/wpscan) | WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |  |  |",
|
|
"Method": "WP",
|
|
"Type": "Scanner"
|
|
},
|
|
"xsser": {
|
|
"Data": "| Scanner/XSS | [xsser](https://github.com/epsylon/xsser) | Cross Site \"Scripter\" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. |  |  |",
|
|
"Method": "XSS",
|
|
"Type": "Scanner"
|
|
},
|
|
"ysoserial": {
|
|
"Data": "| Utility/VULN | [ysoserial](https://github.com/frohoff/ysoserial) | A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. |  |  |",
|
|
"Method": "VULN",
|
|
"Type": "Utility"
|
|
},
|
|
"zap-cli": {
|
|
"Data": "| Scanner/WVS | [zap-cli](https://github.com/Grunny/zap-cli) | A simple tool for interacting with OWASP ZAP from the commandline. |  |  |",
|
|
"Method": "WVS",
|
|
"Type": "Scanner"
|
|
},
|
|
"zaproxy": {
|
|
"Data": "| Army-Knife/ZAP | [zaproxy](https://github.com/zaproxy/zaproxy) | The OWASP ZAP core project |  |  |",
|
|
"Method": "ZAP",
|
|
"Type": "Army-Knife"
|
|
}
|
|
} |