sf

Advanced search inward search engines, enables analysis provided to exploit GET / POST capturing emails & urls, alongside an internal custom validation junction for each target / url found. How to build git clone https://github.com/gmdutra/docker-inurlbr.git cd docker-inurlbr docker create -t gmdutra/inurlbr . Run docker run --name inurlbr -it -d gmdutra/inurlbr HELP: -h --help Alternative long length care command. --ajuda Command to specify Help. --info Information script. --update Code update. -q Choose which search engine you lot desire through [1...24] / [e1..6]]: [options]: 1 - GOOGLE / (CSE) GENERIC RANDOM / API two - BING three - YAHOO BR 4 - ASK v - HAO123 BR six - GOOGLE (API) seven - LYCOS 8 - UOL BR nine - YAHOO the States 10 - SAPO xi - DMOZ 12 - GIGABLAST xiii - NEVER fourteen - BAIDU BR xv - YANDEX xvi - ZOO 17 - HOTBOT ...

Tool designed to attention position incorrectly configured Django applications that are exposing sensitive information. https://www.reddit.com/r/django/comments/87qcf4/28165_thousand_django_running_servers_are_exposed/ https://twitter.com/6ix7ine/status/978598496658960384?lang=en Usage Usage: python3 djangohunter.py --key {shodan} Dorks: 'DisallowedHost', 'KeyError', 'OperationalError', 'Page non industrial plant life at /' Requirements Shodan Pyfiglet Requests BeautifulSoup pip -r install requirements Demo Disclaimer Code samples are provided for educational purposes. Adequate defenses tin move solely survive built yesteryear researching assail techniques available to malicious actors. Using this code against target systems without prior permission is illegal inwards almost jurisdictions. The authors are non liable for whatever damages from misuse of this information or code. Download Djangohunter

novahot is a webshell framework for penetration testers. It implements a JSON-based API that tin communicate alongside trojans written inwards whatsoever language. By default, it ships alongside trojans written inwards PHP, ruby, together with python. Beyond executing organization commands, novahot is able to emulate interactive terminals, including mysql , sqlite3 , together with psql . It additionally implements "virtual commands" that cash inwards one's chips inwards possible to upload, download, edit, together with thought remote files locallly using your preferred applications. Installation Install the executable require from npm: [sudo] npm install -g novahot Then seed a config file: novahot config > /.novahotrc Usage View the available trojans alongside novahot trojan list . Select a trojan inwards a linguistic communication that is appropriate for your target, therefore re-create its source to a novel file. (Ex: novahot trojan though...

Initial gear upward on vectors for recon commonly involve utilizing pay-for-data/API (Recon-NG), or paying to utilise transforms (Maltego) to teach information mining results. Skiptracer utilizes to a greater extent than or less basic python webscraping (BeautifulSoup) of PII paywall sites to compile passive information on a target on a ramen noodle budget. Example: Installation $ git clone https://github.com/xillwillx/skiptracer.git skiptracer $ cd skiptracer Install requirements $ pip install -r requirements.txt Run $ python skiptracer.py -l (phone|email|sn|name|plate) Usage Full details on how to purpose Skiptracer are on the wiki located here Download Skiptracer

Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD & VIA CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA as well as Freescale processor microcode binaries. It tin sack live used yesteryear end-users who are looking for all relevant microcode information such equally CPUID, Platform, Version, Date, Release, Size, Checksum etc. It is capable of converting Intel microcode containers (dat, inc, h, txt) to binary images for BIOS integration, detecting new/unknown microcodes, checking microcode health, Updated/Outdated condition as well as more. MC Extractor tin sack live also used equally a query analysis tool amongst multiple structures which allow, amid others, total parsing & information display of all documented or non microcode Headers. Moreover, amongst the aid of its extensive database, MC Extractor is capable of uniquely categorizing all su...

Miasm is a gratis together with opened upward source (GPLv2) reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a not exhaustive listing of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE using Elfesteem Assembling / Disassembling X86 / ARM / MIPS / SH4 / MSP430 Representing assembly semantic using intermediate language Emulating using JIT (dynamic code analysis, unpacking, ...) Expression simplification for automatic de-obfuscation ... See the official blog for to a greater extent than examples together with demos. Basic examples Assembling / Disassembling Import Miasm x86 architecture: >>> from miasm2.arch.x86.arch import mn_x86 >>> from miasm2.core.locationdb import LocationDB Get a place db: >>> loc_db = LocationDB() Assemble a line: >>> fifty = mn_x86.fromstring('XOR ECX, ECX', loc_db, 32) >>> impress fifty XOR ECX, ECX >...

This is a collection of command-line together with GUI tools for capturing together with analyzing audio data. The most interesting tool is called keytap - it tin jurist pressed keyboard keys alone past times analyzing the well captured from the computer's microphone. Build instructions Dependencies: SDL2 - used to capture well together with to opened upward GUI windows libsdl FFTW3 - to a greater extent than or less of the helper tools perform Fourier transformations fftw Linux together with Mac OS git clone https://github.com/ggerganov/kbd-audio cd kbd-audio git submodule update --init mkdir construct && cd construct cmake .. make Windows (todo, PRs welcome) Tools record-full Record well to a raw binary file on disk Usage: ./record-full output.kbd play-full Playback a recording captured via the record-full tool Usage: ./play-full input.kbd record Record well alone spell typing. Useful for collecting preparation information for keyta...

R3con1z3r is a lightweight Web information gathering tool amongst an intuitive features written inwards python. it provides a powerful surround inwards which opened upwards source intelligence (OSINT) web-based footprinting tin give the axe endure conducted speedily too thoroughly. Footprinting is the get-go stage of ethical hacking, its the collection of every possible information regarding the target. R3con1z3r is a passive reconnaissance tool amongst built-in functionalities which includes: HTTP header flag, Traceroute, Whois Footprinting, DNS information, Site on same server, Nmap port scanner, Reverse Target too hyperlinks on a webpage. The tool, subsequently existence provided amongst necessary inputs generates an output inwards HTML format. Screenshots Installation r3con1z3r supports Python 2 too Python 3 . $ git clone https://github.com/abdulgaphy/r3con1z3r.git $ cd r3con1z3r $ pip install -r requirements.txt Optional for Linux users $ sudo chmod +x r3c...

Ubuntu stealer, pocket ubuntu information inwards local pc (nice alongside usb key) Require G++ sudo apt-get install g++ libsqlite3 sudo apt-get install libsqlite3-dev Compilation Go inwards Ustealer/ folder as well as function makefile make Use ./ustealer Download Ustealer

The Docker Bench for Security is a script that checks for dozens of mutual best-practices some deploying Docker containers inward production. The tests are all automated, in addition to are inspired yesteryear the CIS Docker Community Edition Benchmark v1.1.0 . We are releasing this every bit a follow-up to our Understanding Docker Security in addition to Best Practices weblog post. We are making this available every bit an open-source utility then the Docker community tin hand the sack accept an slow agency to self-assess their hosts in addition to docker containers against this benchmark. Running Docker Bench for Security We packaged docker bench every bit a modest container for your convenience. Note that this container is beingness run amongst a lot of privilege -- sharing the host's filesystem, pid in addition to network namespaces, due to portions of the benchmark applying to the running host. Don't forget to arrange the shared volumes according to your operat...