sf

DeepSearch is a uncomplicated command line tool for bruteforce directories as well as files inwards websites. Installation $ git clone https://github.com/m4ll0k/DeepSearch.git deepsearch $ cd deepsearch $ pip3 install requests $ python3 deepsearch.py Screenshots Usage Basic: python3 deepsearch.py -u http://testphp.vulnweb.com/ -e php -w wordlist.txt Force extension for every wordlist entry (support 1 extension): python3 deepsearch.py -u http://testphp.vulnweb.com/ -e php -w wordlist.txt -f Make a asking past times hostname (ip): python3 deepsearch.py -u http://testphp.vulnweb.com/ -e php -w wordlist.txt -b Force lowercase for every wordlist entry: python3 deepsearch.py -u http://testphp.vulnweb.com/ -e php -w wordlist.txt -l Force upper-case alphabetic lineament for every wordlist entry: python3 deepsearch.py -u http://testphp.vulnweb.com/ -e php -w wordlist.txt -p Show alone condition code separated past times comma: python3 deepsearch.py -u http:/...

Knockpy is a python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan for DNS zone transfer together with to endeavor to bypass the wildcard DNS record automatically if it is enabled. Now knockpy supports queries to VirusTotal subdomains, you lot tin setting the API_KEY inside the config.json file. Very simply $ knockpy domain.com Export amount study inwards JSON If you lot desire to relieve amount log like this one precisely type: $ knockpy domain.com --json Install Prerequisites Python 2.7.6 Dependencies Dnspython $ sudo apt-get install python-dnspython Installing $ git clone https://github.com/guelfoweb/knock.git $ cd knock $ nano knockpy/config.json <- prepare your virustotal API_KEY $ sudo python setup.py install Note that it's recommended to purpose Google DNS : 8.8.8.8 together with 8.8.4.4 Knockpy arguments $ knockpy -h usage: knockpy [-h] [-v] [-w WORDLIST] [-r] [-c] [-j] domain...

Script to fetch, install, update together with search wordlist archives from websites offering wordlists amongst to a greater extent than than 1800 wordlists available. In the latest version of the Blackarch Linux it has been added to /usr/share/wordlists/ directory. Installation pacman -S wordlistctl Usage [ sepehrdad@blackarch-dev /blackarch/repos/wordlistctl ]$ wordlistctl -H --==[ wordlistctl past times blackarch.org ]==-- usage: wordlistctl -f <arg> [options] | -s <arg> [options] | -S <arg> | <misc> options: -f <num> - download chosen wordlist - ? to listing wordlists amongst id -d <dir> - wordlists base of operations directory (default: /usr/share/wordlists) -c <num> - alter wordlists category - ? to listing wordlists categories -s <regex> - wordlist to search using <regex> inward base of operations directory -S <regex> - wordlist to search using <regex> inward sites -h ...

Hash Generator & Cracker Online Offline suported hash: md5 sha1 sha224 sha256 sha384 sha512 Install Note Clone the repository: git clone https://github.com/0xR0/hediye.git Then become inside: cd hediye/ purpose examples: python3 hediye.py -k Key / For --> Generate Hash (md5, sha1, sha224, sha256, sha384, sha512) python3 hediye.py -v HASH -f Wordlist / For --> Brute Force Attack python3 hediye.py -n HASH / For --> Online Search Generate Hash python3 hediye.py -k 4617165 Brute Force Attack Online Search Download Hediye

Fierce is a semi-lightweight scanner that helps locate non-contiguous IP infinite in addition to hostnames against specified domains. It's actually meant equally a pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of those involve that you lot already know what IP infinite you lot are looking for. This does non perform exploitation in addition to does non scan the whole network indiscriminately. It is meant specifically to locate probable targets both within in addition to exterior a corporate network. Because it uses DNS primarily you lot volition oft notice mis-configured networks that leak internal address space. That's peculiarly useful inwards targeted malware. Options: -connect Attempt to brand http connections to whatsoever non RFC1918 (public) addresses. This volition output the render headers but live on warned, this could receive got a long fourth dimension against a fellowship amongst many targets, depending on network/mach...

Synopsis bscan is a command-line utility to perform active information gathering together with service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console output together with a well-defined directory structure. Installation bscan was written to last run on Kali Linux , but in that place is naught inherently preventing it from running on whatever OS amongst the appropriate tools installed. Download the latest packaged version from PyPI: pip install bscan Or teach the bleeding-edge version from version control: pip install https://github.com/welchbj/bscan/archive/master.tar.gz Basic Usage bscan has a broad multifariousness of configuration options which tin last used to melody scans to your needs. Here's a quick example: $ bscan \ > --max-concurrency iii \ > --patterns [Mm]icrosoft \ > --status-interval 10 \ > --verbose-status \ > scanme.nmap.or...

The mysql customer read the password, together with thus write this for around malloc'ed memory, together with complimentary it, but but because a chunk was freed doesn't hateful it volition hold upward used again, to ensure that your programs non continue sensitive information inward retentiveness you lot must overwrite the memory. The original destination is larn the password passed through tty, but sometimes it likewise gets the password passed from command line (-pxxxxxx). Tested inward mysql Ver 15.1 Distrib 10.3.13-MariaDB, for Linux (x86_64) using readline 5.1 Compiling for compile you lot exclusively bespeak to run make , if you lot desire add together around flags, for whatever reason, you lot tin exercise that amongst CFLAGS=myflags make . if the organization mysql customer is non placed at /usr/bin/mysql you'll bespeak compile amongst CFLAGS=-DMYSQLCLI=/path/to/mysql make Options mysql-magic [options] <pid> -o <offset> comma-separated...

Brute forcing tool for FTP server. FTPBruter tin run inwards whatever OS if they convey in addition to back upwards Python 3. Feature Brute forcefulness a FTP server amongst a username or a listing of usernames (That's all). Install in addition to Run on Linux You convey to install Python iii first: Install Python iii on Arch Linux in addition to its distros: sudo pacman -S python3 Install Python iii on Debian in addition to its distros: sudo apt install python3 git clone https://github.com/GitHackTools/FTPBruter cd FTPBruter python3 ftpbruter.py Install in addition to Run on Windows Download in addition to run Python 3.7.x setup file from Python.org . On Install Python 3.7 , enable Add Python 3.7 to PATH . Download in addition to run Git setup file from Git-scm.com in addition to lead Use Git from Windows Command Propmt . After that, opened upwards PowerShell or Command Propmt in addition to hold out into these commands: git clone https://github.com...

A safety testing Slackbot built alongside a Kubernetes backend on the Google Cloud Platform Architecture Demo Data Flow 1 - API asking (tool, target, options) initiated from Slackbot, sent to the API server, which is running every bit a Docker container on a Kubernetes (K8s) cluster in addition to tin endure scaled. 2 - API server drops the asking received every bit a message to a PubSub Tool Topic. 3 - Messages are published to the Tool Subscription. 4 - Subscription Worker(s), running every bit Docker container(s) on the K8s cluster, consumes the message from the subscription. The issue of these workers tin endure scaled every bit well. 5 - Depending upon the tool, target in addition to options received from the destination user, appropriate Tool Worker(s) are initiated inwards the same K8s cluster every bit Docker containers. Results are stored temporarily on a local directory of that container. Github directory of that tool is cloned. 6 - Influenza A virus subtyp...

BruteDum is a SSH, FTP, Telnet, PostgreSQL, RDP, VNC beast forcing tool amongst Hydra, Medusa too Ncrack. BruteDum tin dismiss function amongst aany Linux distros if they accept Python 3. Features of BruteDum SSH, FTP, Telnet, PostgreSQL, RDP, VNC amongst Hydra (recommended) SSH, FTP, Telnet, PostgreSQL, RDP, VNC amongst Medusa SSH, FTP, Telnet, PostgreSQL, RDP, VNC amongst Ncrack Scan victim's ports amongst Nmap Install too run on Linux You accept to install Python iii first: Install Python iii on Arch Linux too its distros: sudo pacman -S python3 Install Python iii on Debian too its distros: sudo apt install python3 You accept to install Hydra, Medusa, Nmap too Ncrack too: On Arch Linux too its distros: sudo pacman -S nmap hydra medusa ncrack On Debian too its distros: sudo apt install nmap hydra medusa ncrack git clone https://github.com/GitHackTools/BruteDum cd BruteDum python3 brutedum.py Screenshots Scanning victim's ports amongst N...

Horn3t is your Nr #1 tool for exploring subdomains visually. Building on the keen Sublist3r framework (or extensible alongside your favorite one) it searches for subdomains in addition to generates awesome movie previews. Get a fast overview of your target alongside http condition codes, add together custom industrial plant life subdomains in addition to straight access industrial plant life urls alongside i click. Recon  your targets at blazing speed Enhance  your productivity yesteryear focusing on interesting  looking  sites Enumerate  critical sites immediately Sting  your target Installation Install Google Chrome Install requirements.txt alongside pip3 Install requirements.txt of sublist3r alongside pip3 Put the directory inside the spider web server of your choice Make certain to induce got the correct permissions Run horn3t.py Or alternatively piece of job the install.sh file alongside docker. Afterwards you lot tin access t...

Influenza A virus subtype H5N1 threaded, recursive, spider web directory brute-force scanner over HTTP/2 using hyper , inspired past times Gobuster . Features Fast in addition to portable - install hyper in addition to run. Multiconnection scanning. Multithreaded connections. Scalable: scans tin hand notice move every bit docile or aggressive every bit you lot configure them to be. h2 in addition to h2c support. Configurable directory recursion depth. Install You exclusively remove to install ane dependency. If you lot don't convey hyper , run: pip3 install -r requirements.txt Usage usage: h2buster.py [-h] -w wordlist -u target [-r directory_depth] [-c connections] [-t threads] h2buster: an HTTP/2 spider web directory brute-force scanner. arguments: -h, --help exhibit this assistance message in addition to leave of absence -w wordlist Directory wordlist -u target Target URL/IP address. Default port is 443...

Influenza A virus subtype H5N1 fuzzer for whatever GET entries. Features Multi-threading on demand Fuzzing, bruteforcing GET params Find admin panels Colored output Hide results past times supply code, give-and-take numbers Proxy support Big wordlist Colored Usages Install git clone https://github.com/ManhNho/brutality.git chmod 755 -R brutality/ cd brutality/ pip install -r requirements.txt Helps python brutality -h Examples Use default wordlist alongside v threads (-t 5) in addition to cover 404 messages (–e 404) to fuzz the given URL ( http://192.168.1.1/FUZZ ): python brutality.py -u 'http://192.168.1.1/FUZZ' -t v -e 404 Use common_pass.txt wordlist (-f ./wordlist/common_pass.txt), take away reply alongside 6969 length (-r 6969) in addition to proxy at 127.0.0.1:8080 (-p http://127.0.0.1:8080 ) to fuzz the given URL ( http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit# ): python brutality.py -u 'http://...

Influenza A virus subtype H5N1 elementary wordlist generator together with mangler written inwards python. It makes usage of python multiprocessing capabilities inwards lodge to speed upward his task (CPU intensive). Supported permutations: Capital Upper 1337 Append Prepend Additional functions: Test/Dry run Multiprocessing Multicore Possibility to adapt cores/processes publish manually. Each generated password doesnt comprise same discussion twice. Preview: usage: wordlister.py [-h] --input INPUT --perm PERM --min MIN --max MAX [--test TEST] [--cores CORES] [--leet] [--cap] [--up] [--append APPEND] [--prepend PREPEND] Influenza A virus subtype H5N1 elementary wordlist generator together with mangler written inwards python. optional arguments: -h, --help exhibit this assist message together with choke --test TEST Output offset due north iterations (single process/core) --cores CORES Manually...