Trickest | Offensive Security Automation

cve

Gather and update all available and newest CVEs with their PoC.

wordlists

Real-world infosec wordlists, updated regularly

inventory

Asset inventory of over 800 public bug bounty programs.

resolvers

The most exhaustive list of reliable DNS resolvers.

mksub

Generate tens of thousands of subdomain combinations in a matter of seconds

zip

Monitoring the internet for new .zip domains

dsieve

Filter and enrich a list of subdomains by level

mkpath

Make URL path combinations using a wordlist

insiders

Archive of Potential Insider Threats

find-gh-poc

Find CVE PoCs on GitHub

log4j

Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.

trickest-cli

Execute Trickest workflows right from your terminal

enumerepo

List all public repositories for (valid) GitHub usernames

github-logs

Extracting OSINT Insights from 15TB of GitHub Event Logs

containers

Automated privilege escalation of the world's most popular Docker images.

cloud

Monitoring the Cloud Landscape

safe-harbour

security.txt collection of most popular world-wide domains

recon-and-vulnerability-scanner-template

Create your own recon & vulnerability scanner with Trickest and GitHub

mgwls

Combine words from two wordlist files and concatenate them with an optional delimiter

scripts

Handy scripts and one-liners to make life easier

elasticsearch_index

Manage attack surface data on Elasticsearch

packages

Automated compromise detection of the world's most popular packages

action

Github Action for Trickest Workflows

s5cmd

Parallel S3 and local filesystem execution tool.

vault-k8s

First-class support for Vault and Kubernetes.

trickest-agent-init