148 lines
9.7 KiB
JSON
148 lines
9.7 KiB
JSON
{
|
|
"Amass": {
|
|
"Data": "| Discovery/DOMAIN | [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"Arjun": {
|
|
"Data": "| Discovery/HTTP | [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. |  |  |",
|
|
"Method": "HTTP",
|
|
"Type": "Discovery"
|
|
},
|
|
"Corsy": {
|
|
"Data": "| Scanner/CORS | [Corsy](https://github.com/s0md3v/Corsy) | CORS Misconfiguration Scanner |  |  |",
|
|
"Method": "CORS",
|
|
"Type": "Scanner"
|
|
},
|
|
"NoSQLMap": {
|
|
"Data": "| Scanner/NOSQL | [NoSQLMap](https://github.com/codingo/NoSQLMap) | Automated NoSQL database enumeration and web application exploitation tool. |  |  |",
|
|
"Method": "NOSQL",
|
|
"Type": "Scanner"
|
|
},
|
|
"Photon": {
|
|
"Data": "| Discovery/CRAWL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  |",
|
|
"Method": "CRAWL",
|
|
"Type": "Discovery"
|
|
},
|
|
"Silver": {
|
|
"Data": "| Discovery/VULN | [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services |  |  |",
|
|
"Method": "VULN",
|
|
"Type": "Discovery"
|
|
},
|
|
"Striker": {
|
|
"Data": "| Scanner/WVS | [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. |  |  |",
|
|
"Method": "WVS",
|
|
"Type": "Scanner"
|
|
},
|
|
"XSStrike": {
|
|
"Data": "| Scanner/XSS | [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. |  |  |",
|
|
"Method": "XSS",
|
|
"Type": "Scanner"
|
|
},
|
|
"a2sv": {
|
|
"Data": "| Scanner/SSL | [a2sv](https://github.com/hahwul/a2sv) | Auto Scanning to SSL Vulnerability |  |  |",
|
|
"Method": "SSL",
|
|
"Type": "Scanner"
|
|
},
|
|
"assetfinder": {
|
|
"Data": "| Discovery/DOMAIN | [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"dnsprobe": {
|
|
"Data": "| Discovery/DNS | [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |  |  |",
|
|
"Method": "DNS",
|
|
"Type": "Discovery"
|
|
},
|
|
"findomain": {
|
|
"Data": "| Discovery/DOMAIN | [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"ftc": {
|
|
"Data": "| Utility/CLIP | [ftc](https://github.com/hahwul/ftc) | simple copy to file to clipboard |  |  |",
|
|
"Method": "CLIP",
|
|
"Type": "Utility"
|
|
},
|
|
"gf": {
|
|
"Data": "| Utility/GREP | [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things |  |  |",
|
|
"Method": "GREP",
|
|
"Type": "Utility"
|
|
},
|
|
"gospider": {
|
|
"Data": "| Discovery/CRAWL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  |",
|
|
"Method": "CRAWL",
|
|
"Type": "Discovery"
|
|
},
|
|
"gron": {
|
|
"Type": "Utility",
|
|
"Data": "| Utility/JSON | [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! |  |  |",
|
|
"Method": "JSON"
|
|
},
|
|
"httprobe": {
|
|
"Data": "| Fetch/TOM | [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers |  |  |",
|
|
"Method": "TOM",
|
|
"Type": "Fetch"
|
|
},
|
|
"masscan": {
|
|
"Data": "| Discovery/PORT | [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |  |  |",
|
|
"Method": "PORT",
|
|
"Type": "Discovery"
|
|
},
|
|
"meg": {
|
|
"Data": "| Fetch/TOM | [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts |  |  |",
|
|
"Method": "TOM",
|
|
"Type": "Fetch"
|
|
},
|
|
"naabu": {
|
|
"Data": "| Discovery/PORT | [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |  |  |",
|
|
"Method": "PORT",
|
|
"Type": "Discovery"
|
|
},
|
|
"nmap": {
|
|
"Data": "| Discovery/PORT | [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. |  |  |",
|
|
"Method": "PORT",
|
|
"Type": "Discovery"
|
|
},
|
|
"s3reverse": {
|
|
"Data": "| Utility/S3 | [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. |  |  |",
|
|
"Method": "S3",
|
|
"Type": "Utility"
|
|
},
|
|
"shuffledns": {
|
|
"Data": "| Discovery/DNS | [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. |  |  |",
|
|
"Method": "DNS",
|
|
"Type": "Discovery"
|
|
},
|
|
"sqlmap": {
|
|
"Data": "| Scanner/SQL | [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool |  |  |",
|
|
"Method": "SQL",
|
|
"Type": "Scanner"
|
|
},
|
|
"sqlninja": {
|
|
"Data": "| Scanner/SQL | [sqlninja](https://github.com/xxgrunge/sqlninja) | SQL Injection Tool |  |  |",
|
|
"Method": "SQL",
|
|
"Type": "Scanner"
|
|
},
|
|
"subfinder": {
|
|
"Data": "| Discovery/DOMAIN | [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. |  |  |",
|
|
"Method": "DOMAIN",
|
|
"Type": "Discovery"
|
|
},
|
|
"waybackurls": {
|
|
"Data": "| Discovery/URL | [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain |  |  |",
|
|
"Method": "URL",
|
|
"Type": "Discovery"
|
|
},
|
|
"websocket-connection-smuggler": {
|
|
"Data": "| Fetch/WSOCK | [websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) | websocket-connection-smuggler |  |  |",
|
|
"Method": "WSOCK",
|
|
"Type": "Fetch"
|
|
},
|
|
"xspear": {
|
|
"Data": "| Scanner/XSS | [xspear](https://github.com/hahwul/xspear) | Powerfull XSS Scanning and Parameter analysis tool\u0026gem |  |  |",
|
|
"Method": "XSS",
|
|
"Type": "Scanner"
|
|
}
|
|
}
|