Posts

Showing posts with the label Recon

Sn1per V6.0 - Automated Pentest Framework For Offensive Safety Experts

Image
Sn1per Community Edition is an automated scanner that tin travel used during a penetration test to enumerate as well as scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers as well as Corporate Security teams to deal large environments as well as pentest scopes. SN1PER PROFESSIONAL FEATURES: Professional reporting interface Slideshow for all gathered screenshots Searchable as well as sortable DNS, IP as well as opened upwardly port database Categorized host reports Quick links to online recon tools as well as Google hacking queries Personalized notes champaign for each host DEMO VIDEO: SN1PER COMMUNITY FEATURES:  Automatically collects basic recon (ie. whois, ping, DNS, etc.)  Automatically launches Google hacking queries against a target domain  Automatically enumerates opened upwardly ports via NMap port scanning  Auto...

Skiptracer - Osint Webscaping Framework

Image
Initial gear upward on vectors for recon commonly involve utilizing pay-for-data/API (Recon-NG), or paying to utilise transforms (Maltego) to teach information mining results. Skiptracer utilizes to a greater extent than or less basic python webscraping (BeautifulSoup) of PII paywall sites to compile passive information on a target on a ramen noodle budget. Example: Installation $ git clone https://github.com/xillwillx/skiptracer.git skiptracer $ cd skiptracer Install requirements $ pip install -r requirements.txt Run $ python skiptracer.py -l (phone|email|sn|name|plate) Usage Full details on how to purpose Skiptracer are on the wiki located here Download Skiptracer

Celerystalk - An Asynchronous Enumeration In Addition To Vulnerability Scanner

Image
celerystalk helps you lot automate your network scanning/enumeration procedure amongst asynchronous jobs (aka tasks ) spell retaining total command of which tools you lot desire to run. Configurable - Some mutual tools are inwards the default config, simply you lot tin add together whatever tool you lot want Service Aware - Uses nmap/nessus service names rather than port numbers to determine which tools to run Scalable - Designed for scanning multiple hosts, simply industrial plant good for scanning i host at a time VirtualHosts - Supports subdomain recon too virtualhost scanning Job Control - Supports canceling, pausing, too resuming of tasks, inspired past times Burp scanner Screenshots Automatically takes screenshots of every url identified via brute force (gobuster) too spidering (Photon) Install/Setup Supported Operating Systems: Kali Supported Python Version: 2.x You must install too run celerystalk every bit root # git clone https://github.com/sethse...

Pown Recon - A Powerful Target Reconnaissance Framework Powered Past Times Graph Theory

Image
Pown Recon is a target reconnaissance framework powered yesteryear graph theory. The produce goodness of using graph theory instead of apartment tabular array representation is that it is easier to uncovering the relationships betwixt dissimilar types of information which comes quite handy inwards many situations. Graph theory algorithms also assist amongst diffing, searching, similar finding the shortest path, in addition to many to a greater extent than interesting tasks. Quickstart This tool is meant to endure used equally purpose of Pown.js but it tin endure invoked separately equally an independent tool. If installed globally equally purpose of Pown invoke similar this: $ pown recon Otherwise, install this module from the root of your project: $ npm install @pown/recon --save Once done, invoke pown recon similar this: $ ./node_modules/.bin/pown-cli recon You tin also utilization Pown to invoke it locally: $ POWN_ROOT=. pown recon Usage WARNING : This p...

Adidnsdump - Active Directory Integrated Dns Dumping Past Times Whatever Authenticated User

Image
By default whatever user inwards Active Directory tin enumerate all DNS records inwards the Domain or Forest DNS zones, like to a zone transfer. This tool enables enumeration in addition to exporting of all DNS records inwards the zone for recon purposes of internal networks. For to a greater extent than info, read the associated spider web log post . Install in addition to usage You tin either install the tool via pip amongst pip install adidnsdump or install it from git to bring the latest version: git clone https://github.com/dirkjanm/adidnsdump cd adidnsdump pip install . or pip install git+https://github.com/dirkjanm/adidnsdump#egg=adidnsdump The tool requires impacket in addition to dnspython to function. While the tool works amongst both Python 2 in addition to 3, Python iii back upwards requires you lot to install impacket from GitHub . Installation adds the adidnsdump ascendancy to your PATH . For help, try adidnsdump -h . The tool tin move used both stra...

Sn1per V7.0 - Automated Pentest Framework For Offensive Safety Experts

Image
Sn1per Community Edition is an automated scanner that tin hold upwards used during a penetration test to enumerate in addition to scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers in addition to Corporate Security teams to care large environments in addition to pentest scopes. For to a greater extent than information regarding Sn1per Professional, larn to https://xerosecurity.com . SN1PER PROFESSIONAL FEATURES: Professional reporting interface Slideshow for all gathered screenshots Searchable in addition to sortable DNS, IP in addition to opened upwards port database Detailed host reports NMap HTML host reports Quick links to online recon tools in addition to Google hacking queries Takeovers in addition to Email Security HTML5 Notepad ORDER SN1PER PROFESSIONAL: To obtain a Sn1per Professional license, larn to https://xerosecurity.com...

Recsech - Tool For Doing Footprinting Together With Reconnaissance On The Target Web

Image
Recsech is a tool for doing Footprinting together with Reconnaissance on the target web. Recsech collects information such every bit DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github together with much to a greater extent than yous tin run into inwards Features inwards tools . Features inwards tools Name Release Release Date Auto asking alongside Proxy yes 01/05/19 Find Email yes 01/05/19 HoneySpot Detected yes 01/05/19 Subdomain takeover yes 01/05/19 Check Technologies yes 01/05/19 Whois no N/A Crlf injection no N/A Header Security yes 01/05/19 Update Check yes 01/05/19 Port Scanner yes 02/05/19 Sort Domain By IP yes 02/05/19 Wordpress audit no N/A Reconnaissance On Github yes 02/05/19 Language Selection yes 02/05/19 WAF yes 03/05/19 Requirements for using this tool We ask several...