Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Find secrets with Gitleaks 🔑

Find, verify, and analyze leaked credentials

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

In-depth attack surface mapping and asset discovery

Adversary Emulation Framework

Reconnaissance tool for GitHub organizations

Scan for misconfigured S3 buckets across S3-compatible APIs!

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Private key usage verification

A tool designed to hunt for Phishing Kit source code

Finds Directory Listings or open S3 buckets from a list of URLs

Converts a hostname (or URI) to IP address using your local resolver

take a list of resolved subdomains and output any corresponding CNAMES en masse.

Looks for NameServers which return an NXDOMAIN, which may indicate a NS Takeover opportunity.

Reads in a list of domains or subdomains and crawls them for references to S3 buckets

Find domains and subdomains related to a given domain

Check for Akamai Resource Location misconfigurations

Returns the html title for a list of URLs

Converts AWS Key IDs to AWS Account IDs en masse.

Fetch many paths for many hosts - without killing the hosts

Enumerate NSEC records from a list of domains

Parses a list of domains and looks for dead IP addresses in DNS A records

Checks if a list of IP addresses belong to AWS

takes a list of subdomains (i.e. CNAMES) and determines if they DON'T resolve

A Discord token grabber, this time in Golang.

Searchs Hurricane Electric for a given search term and returns all related IP ranges.

Takes a list of domains on stdin and aims to clean them for parsing into other programs

Convert IP addresses to hostnames at scale.

Performs concurrent DNS requests and output the DNS Status