DreyAnd

domloggerpp

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

bbot

A recursive internet scanner for hackers.

fast

🚩 Flag Acquisition and Submission Tool — Make writing exploits your only concern during A/D

proxyman

betterscan-ce

Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

resolvers

List of periodically validated public DNS resolvers

ripgen

Rust-based high performance domain permutation generator.

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Log4J-Scanner

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

Scavenger

Burp extension to create target specific and tailored wordlist from burp history.

rustywitness

A CLI tool for getting screenshots of URLs using headless chrome

uro

declutters url lists for crawling/pentesting

alien

Your favourite chest/terminal bursting buddy!

GraphX

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Fl1pM0n

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

armada

A high performance TCP SYN port scanner.

puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

pop-punk.vim

🎸 Dark, high-contrast color scheme for vim

dref

DNS Rebinding Exploitation Framework

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

shades-of-purple.vim

Dark theme for vim

slavicDisBot

Discord bot that translates from & to Serbian text! (will add more languages)

dnsgen

Generates combination of domain names from the provided input.

RWCTF21-VirtualBox-61-escape

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

tawny-cipher

A custom symmetric encryption algorithm used to make plaintext unreadable by encrypting it with a key. This is a 256 bit encryption so the key and IV must be 256 bits/32 bytes

jwtcat

A CPU-based JSON Web Token (JWT) cracker and - to some extent - scanner.

RECONOLOGY

"A proper recon is 50 percentage of Penetration Testing done."- Following this phrase I create this repository where I write down things I learn about recon, the implementation, to narrow down the target scope.