Dictionary Of PentestingDictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Stars: ✭ 492 (+122.62%)
SonarsearchA MongoDB importer and API for Project Sonars DNS datasets
Stars: ✭ 297 (+34.39%)
sub404A python tool to check subdomain takeover vulnerability
Stars: ✭ 205 (-7.24%)
ras-fuzzerRAS(RAndom Subdomain) Fuzzer
Stars: ✭ 42 (-81%)
Sub-DrillA very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.
Stars: ✭ 70 (-68.33%)
Can I Take Over Xyz"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Stars: ✭ 2,808 (+1170.59%)
SuboverA Powerful Subdomain Takeover Tool
Stars: ✭ 607 (+174.66%)
ksubdomainSubdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
Stars: ✭ 320 (+44.8%)
ReconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Stars: ✭ 974 (+340.72%)
PdlistA passive subdomain finder
Stars: ✭ 204 (-7.69%)
ShufflednsshuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.
Stars: ✭ 498 (+125.34%)
Bugcrowd Levelup Subdomain EnumerationThis repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
Stars: ✭ 513 (+132.13%)
magicReconMagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.
Stars: ✭ 478 (+116.29%)
fresh.pyAn efficient multi-threaded DNS resolver validator
Stars: ✭ 80 (-63.8%)
AcamarA Python3 based single-file subdomain enumerator
Stars: ✭ 89 (-59.73%)
AiodnsbrutePython 3.5+ DNS asynchronous brute force utility
Stars: ✭ 370 (+67.42%)
Js.orgDedicated to JavaScript and its awesome community since 2015
Stars: ✭ 3,996 (+1708.14%)
Subdomain3A new generation of tool for discovering subdomains( ip , cdn and so on)
Stars: ✭ 605 (+173.76%)
OsmedeusFully automated offensive security framework for reconnaissance and vulnerability scanning
Stars: ✭ 3,391 (+1434.39%)
GetaltnameExtract subdomains from SSL certificates in HTTPS sites.
Stars: ✭ 320 (+44.8%)
OneforallOneForAll是一款功能强大的子域收集工具
Stars: ✭ 4,202 (+1801.36%)
FierceA DNS reconnaissance tool for locating non-contiguous IP space.
Stars: ✭ 1,072 (+385.07%)
SubjackSubdomain Takeover tool written in Go
Stars: ✭ 1,194 (+440.27%)
AmassIn-depth Attack Surface Mapping and Asset Discovery
Stars: ✭ 1,693 (+666.06%)
DumbDumain Bruteforcer - a fast and flexible domain bruteforcer
Stars: ✭ 54 (-75.57%)
AmassIn-depth Attack Surface Mapping and Asset Discovery
Stars: ✭ 6,284 (+2743.44%)
Dns DiscoveryDNS-Discovery is a multithreaded subdomain bruteforcer.
Stars: ✭ 114 (-48.42%)
MassdnsA high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
Stars: ✭ 2,093 (+847.06%)
Dnsautorebindingssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
Stars: ✭ 188 (-14.93%)
Qsfuzzqsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
Stars: ✭ 201 (-9.05%)
KnaryA simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
Stars: ✭ 187 (-15.38%)
Mad MetasploitMetasploit custom modules, plugins, resource script and.. awesome metasploit collection
Stars: ✭ 200 (-9.5%)
DnsblastA simple and stupid load testing tool for DNS resolvers
Stars: ✭ 185 (-16.29%)
Django Oms加强版运维系统,集成工单、发布、监控、管理dns、saltstack
Stars: ✭ 201 (-9.05%)
GarudAn automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
Stars: ✭ 183 (-17.19%)
Dns JavaDNS wrapper library that provides SRV lookup functionality
Stars: ✭ 183 (-17.19%)
Contact.shAn OSINT tool to find contacts in order to report security vulnerabilities.
Stars: ✭ 216 (-2.26%)
PdnsPowerDNS Authoritative, PowerDNS Recursor, dnsdist
Stars: ✭ 2,575 (+1065.16%)
Knot ResolverKnot Resolver - resolve DNS names like it's 2021
Stars: ✭ 200 (-9.5%)
Dns HeavenFixes stupid macOS DNS stack (/etc/resolv.conf)
Stars: ✭ 182 (-17.65%)
CrithitTakes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
Stars: ✭ 182 (-17.65%)
SlicerA tool to automate the boring process of APK recon
Stars: ✭ 199 (-9.95%)
TxehGo library and CLI utilty for /etc/hosts management.
Stars: ✭ 181 (-18.1%)
NetdotNetwork Documentation Tool
Stars: ✭ 180 (-18.55%)
MaradnsMaraDNS: A small open-source DNS server | 2020 updates: Lua and blocklist support, etc.
Stars: ✭ 206 (-6.79%)
Bind9Mirror of https://gitlab.isc.org/isc-projects/bind9, please submit issues and PR/MRs in the GitLab.
Stars: ✭ 197 (-10.86%)
Dnsproxy防 DNS 缓存污染,兼顾查询质量与速度
Stars: ✭ 177 (-19.91%)
NsdThe NLnet Labs Name Server Daemon (NSD) is an authoritative, RFC compliant DNS nameserver.
Stars: ✭ 197 (-10.86%)
BrowsertunnelSurreptitiously exfiltrate data from the browser over DNS
Stars: ✭ 177 (-19.91%)
RrdaREST API allowing to perform DNS queries over HTTP
Stars: ✭ 176 (-20.36%)
Dns ViolationsList of DNS violations by implementations, software and/or systems
Stars: ✭ 216 (-2.26%)
GoreconGorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal
Stars: ✭ 208 (-5.88%)
Ts DnsTelescope DNS,简单易用的DNS分组/转发器
Stars: ✭ 205 (-7.24%)
BasecrackDecode All Bases - Base Scheme Decoder
Stars: ✭ 196 (-11.31%)