0xjeti Goto Github PK

0xjeti.github.io

bass

Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers to your "resolver.txt"

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

blog

bountyplz

Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)

cutlines

Filter files based on patterns stored in file

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

eipfish

Go fish for AWS EIPs

ezxss

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

goaltdns

A permutation generation tool written in golang

http2smugl

intitools

Collection of tools to interact with Intigriti website

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

pwn-machine-request-notifier

Module for BitK's pwn-machine to log all incoming DNS and HTTP requests and send Discord / Slack notifications

scoped-certstream

CertStream domains filtered by domains found in scope file

shuffledns

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

smuggles

An HTTP request smuggling scanner designed to work at scale

subjack

Subdomain Takeover tool written in Go

web-cache-vulnerability-scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).