dusheeno's repositories
puter
🌐 The Web OS! Free, Open-Source, and Self-Hostable.
csprecon
Discover new target domains using Content Security Policy
favirecon
Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
cloud_enum
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
CVE-2024-24919-Bulk-Scanner
CVE-2024-24919 [Check Point Security Gateway Information Disclosure]
HEDnsExtractor
A suite for hunting suspicious targets, expose domains and phishing discovery
SubProber
Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. The tool offers concurrent scanning, allowing users to define their preferred concurrency level for faster results. Whether you are on Linux, Windows, or macos
autochrome
This tool downloads, installs, and configures a shiny new copy of Chromium.
OldTweetDeck
Returns old TweetDeck, for free!
bypass-403
A simple script just made for self use for bypassing 403
broken-link-checker
Find broken links, missing images, etc within your HTML.
shortscan
An IIS short filename enumeration tool
graphql-wordlist
The only graphql wordlists you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
fake-sms
A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.
cowitness
CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an HTTP server and a DNS server, providing complete responses and valuable insights during your testing process.
DeauthDetector
Detect deauthentication frames using an ESP8266
RepeaterSearch
This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response matches a query via simple text matching or Regex.
leaky-paths
A collection of special paths linked to common internal paths, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.
juicyinfo-nuclei-templates
Nuclei (https://github.com/projectdiscovery/nuclei) templates for extracting juicy info from web pages
testssl.sh
Testing TLS/SSL encryption anywhere on any port
katana
A next-generation crawling and spidering framework.
fzf
:cherry_blossom: A command-line fuzzy finder
ffuf
Fast web fuzzer written in Go
cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
metabigor
OSINT tools and more but without API ke
gowitness
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
feroxbuster
A fast, simple, recursive content discovery tool written in Rust.