mirror of
https://github.com/hahwul/WebHackersWeapons.git
synced 2025-03-08 06:56:06 -05:00
Update README.md
This commit is contained in:
하훌
GitHub
parent
5f9ac81aab
commit
5ac49606c0
130
README.md
130
README.md
@ -31,41 +31,98 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||||||
|
|
||||||
## Weapons
|
## Weapons
|
||||||
|
|
||||||
|
## Fetch path and host
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers |  |  | <br> <br>  <br>  |
|
||||||
|
| [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## Web Discovery
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. |  |  | <br> <br>  <br>  |
|
||||||
|
| [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  | <br> <br>  <br>  |
|
||||||
|
| [ReconDog](https://github.com/s0md3v/ReconDog) | Reconnaissance Swiss Army Knife |  |  | <br> <br>  <br>  |
|
||||||
|
| [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |  |  | <br> <br>  <br>  |
|
||||||
|
| [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  | <br> <br>  <br>  |
|
||||||
|
| [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. |  |  | <br> <br>  <br>  |
|
||||||
|
| [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## XSS
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. |  |  | <br> <br>  <br>  |
|
||||||
|
| [Xspear](https://github.com/hahwul/Xspear) | Powerfull XSS Scanning and Parameter analysis tool&gem |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## SQL Injection
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool |  |  | <br> <br>  <br>  |
|
||||||
|
| [sqlninja](https://github.com/xxgrunge/sqlninja) | SQL Injection Tool |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## NoSQL Injection
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [NoSQLMap](https://github.com/codingo/NoSQLMap) | Automated NoSQL database enumeration and web application exploitation tool. |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## CORS Misconfiguration
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [Corsy](https://github.com/s0md3v/Corsy) | CORS Misconfiguration Scanner |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## Cloud Security
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
## Main Weapon
|
## Main Weapon
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
|
||||||
## Fetch path and host
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
| [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers |  |  | <br> <br>  <br>  |<br>| [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts |  |  | <br> <br>  <br>  |<br>
|
|
||||||
## SQL Injection
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
| [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool |  |  | <br> <br>  <br>  |<br>| [sqlninja](https://github.com/xxgrunge/sqlninja) | SQL Injection Tool |  |  | <br> <br>  <br>  |<br>
|
|
||||||
## CORS Misconfiguration
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
| [Corsy](https://github.com/s0md3v/Corsy) | CORS Misconfiguration Scanner |  |  | <br> <br>  <br>  |<br>
|
|
||||||
## Subdomain Enumeration
|
## Subdomain Enumeration
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
| [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery |  |  | <br> <br>  <br>  |<br>| [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain |  |  | <br> <br>  <br>  |<br>| [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. |  |  | <br> <br>  <br>  |<br>| [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. |  |  | <br> <br>  <br>  |<br>
|
| [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery |  |  | <br> <br>  <br>  |
|
||||||
|
| [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain |  |  | <br> <br>  <br>  |
|
||||||
|
| [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. |  |  | <br> <br>  <br>  |
|
||||||
|
| [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
## Port scanner
|
## Port scanner
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
| [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |  |  | <br> <br>  <br>  |<br>| [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |  |  | <br> <br>  <br>  |<br>| [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. |  |  | <br> <br>  <br>  |<br>
|
| [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |  |  | <br> <br>  <br>  |
|
||||||
## XSS
|
| [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |  |  | <br> <br>  <br>  |
|
||||||
|
| [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## Web Vulnerability Scanner
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
| [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. |  |  | <br> <br>  <br>  |<br>| [Xspear](https://github.com/hahwul/Xspear) | Powerfull XSS Scanning and Parameter analysis tool&gem |  |  | <br> <br>  <br>  |<br>
|
| [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services |  |  | <br> <br>  <br>  |
|
||||||
|
| [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. |  |  | <br> <br>  <br>  |
|
||||||
|
| [a2sv](https://github.com/hahwul/a2sv) | Auto Scanning to SSL Vulnerability |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
|
## CSRF
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
|
||||||
|
## WebSocket
|
||||||
|
|
||||||
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
| [websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) | websocket-connection-smuggler |  |  | <br> <br>  <br>  |
|
||||||
|
|
||||||
## Path traversal / Directory traversal / LFI
|
## Path traversal / Directory traversal / LFI
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
@ -76,46 +133,19 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
|
||||||
## CSRF
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
|
|
||||||
## NoSQL Injection
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
| [NoSQLMap](https://github.com/codingo/NoSQLMap) | Automated NoSQL database enumeration and web application exploitation tool. |  |  | <br> <br>  <br>  |<br>
|
|
||||||
## SSRF
|
## SSRF
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
|
|
||||||
## Cloud Security
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
| [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. |  |  | <br> <br>  <br>  |<br>
|
|
||||||
## Web Discovery
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
| [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. |  |  | <br> <br>  <br>  |<br>| [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  | <br> <br>  <br>  |<br>| [ReconDog](https://github.com/s0md3v/ReconDog) | Reconnaissance Swiss Army Knife |  |  | <br> <br>  <br>  |<br>| [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |  |  | <br> <br>  <br>  |<br>| [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  | <br> <br>  <br>  |<br>| [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. |  |  | <br> <br>  <br>  |<br>| [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain |  |  | <br> <br>  <br>  |<br>
|
|
||||||
## Web Vulnerability Scanner
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
| [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services |  |  | <br> <br>  <br>  |<br>| [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. |  |  | <br> <br>  <br>  |<br>| [a2sv](https://github.com/hahwul/a2sv) | Auto Scanning to SSL Vulnerability |  |  | <br> <br>  <br>  |<br>| [websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) | websocket-connection-smuggler |  |  | <br> <br>  <br>  |<br>
|
|
||||||
## WebSocket
|
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
|
||||||
|
|
||||||
## Utility for hackers
|
## Utility for hackers
|
||||||
|
|
||||||
| Name | Description | Popularity | Language | Metadata |
|
| Name | Description | Popularity | Language | Metadata |
|
||||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||||
| [ftc](https://github.com/hahwul/ftc) | simple copy to file to clipboard |  |  | <br> <br>  <br>  |<br>| [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things |  |  | <br> <br>  <br>  |<br>| [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! |  |  | <br> <br>  <br>  |<br>## Contribute and Contributor
|
| [ftc](https://github.com/hahwul/ftc) | simple copy to file to clipboard |  |  | <br> <br>  <br>  |
|
||||||
|
| [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things |  |  | <br> <br>  <br>  |
|
||||||
|
| [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! |  |  | <br> <br>  <br>  |
|
||||||
|
## Contribute and Contributor
|
||||||
### Usage of weapon-md
|
### Usage of weapon-md
|
||||||
```
|
```
|
||||||
./weapon-md
|
./weapon-md
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user