Black Lantern Security

bbot

A recursive internet scanner for hackers.

writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

MANSPIDER

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

badsecrets

A library for detecting known secrets across many web frameworks

TREVORproxy

A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

dp_cryptomg

Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

cloudcheck

Check whether an IP address or hostname belongs to popular cloud providers

baddns

Check subdomains for subdomain takeovers and other DNS tomfoolery

bls-bible

BLS-Bible is a knowledge-base application that houses a collection of guides and write-ups that BLS uses for our various operations.

public-dns-servers

A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!

bbot-vivagraphjs

Visualize BBOT scans in realtime with VivaGraphJS

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

spiderfoot

SpiderFoot automates OSINT collection so that you can focus on analysis.

secrets-patterns-db

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

radixtarget

RadixTarget is a performant radix implementation designed for quick lookups of IP addresses/networks and DNS hostnames.

ASM_BBOT_Training

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

wapalyzer

🌐 Identify the technologies powering any website. This is a fork of the now deleted Wappalyzer project by @AliasIO and community.

bbot-1

OSINT automation for hackers.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

CrackMapExec

A swiss army knife for pentesting networks

sccmhunter

wappalyzer

Identify technology on websites.

BloodHound.py

A Python based ingestor for BloodHound

impacket

Impacket is a collection of Python classes for working with network protocols.

NetExec

The Network Execution Tool

py2neo

Py2neo is a comprehensive Neo4j driver library and toolkit for Python.

python-future

Easy, clean, reliable Python 2/3 compatibility

wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library