A program that checks if a domain can be spoofed from. The program checks SPF and DMARC records for weak configurations that allow...

Dismap is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp,...

TruffleHog is a tool that scans git repositories and looks for high-entropy strings and patterns that may indicate the presence of...

Nice tool for finding information from GitHub with regex, with the ability to search specific GitHub users and/or projects. Install: git...

AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for interesting files. It's similar to a subdomain bruteforcer but is...

A program that checks if a domain can be spoofed from. The program checks SPF and DMARC records for weak configurations that allow...

Tool for enumerating subdomains, enumerating DNS, WAF detection, WHOIS, port scan, wayback machine, email harvesting. Install: git clone...

Shodan crawls public infrastructure and displays it in a searchable format. Using a company name, domain name, IP address it is possible...

dnsrecon is a pyhton tool for enumerating DNS records (MX, SOA, NS, A, AAAA, SPF and TXT) and can provide a number of new associated...

A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean,...

A tool designed to perform Forced Browsing, an attack where the aim is to enumerate and access resources that are not referenced by the...

Nice tool for brute forcing file/folder paths on a victim website. Install: sudo apt install gobuster Usage: gobuster dir -u...

certSniff is a Certificate Transparency logs keyword watcher I wrote in Python. It uses the certstream library to watch for certificate...

Fast vulnerability scanner that uses .yaml templates to search for specific issues. Install: go install -v github.com/projectdiscovery/nu...

A JavaScript bookmarklet for extracting all webpage endpoint links on a page. Created by @renniepak , this JavaScript code snippet can be...