mirror of
https://github.com/hahwul/WebHackersWeapons.git
synced 2024-12-18 20:24:27 -05:00
Merge branch 'master' of https://github.com/hahwul/WebHackersWeapons
This commit is contained in:
hahwul
commit
8246dac648
23
README.md
23
README.md
@ -1,8 +1,6 @@
|
||||
<h1 align="center">
|
||||
<br>
|
||||
<a href=""><img src="https://user-images.githubusercontent.com/13212227/91529103-aba4b400-e943-11ea-9983-3b5aba7dd25c.png" alt="" width="300px;"></a>
|
||||
<br>
|
||||
Web Hacker's Weapons
|
||||
<a href=""><img src="https://user-images.githubusercontent.com/13212227/104400969-9f3d9280-5596-11eb-80f4-864effae95fc.png" alt="" width="500px;"></a>
|
||||
<br>
|
||||
<img src="https://img.shields.io/github/languages/top/hahwul/WebHackersWeapons?style=flat">
|
||||
<img src="https://img.shields.io/github/last-commit/hahwul/WebHackersWeapons?style=flat">
|
||||
@ -14,6 +12,10 @@
|
||||
</h1>
|
||||
A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
|
||||
|
||||
## Family project
|
||||
[](https://github.com/hahwul/WebHackersWeapons)
|
||||
[](https://github.com/hahwul/MobileHackersWeapons)
|
||||
|
||||
## Table of Contents
|
||||
- [WHW-Tools](https://whw-tools.hahwul.com)
|
||||
- [Weapons](#weapons)
|
||||
@ -47,12 +49,12 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
||||
| Discovery/ALL | [scilla](https://github.com/edoardottt/scilla) | 🏴☠️ Information Gathering tool 🏴☠️ dns/subdomain/port enumeration |  |  |
|
||||
| Discovery/ALL | [sn0int](https://github.com/kpcyrd/sn0int) | Semi-automatic OSINT framework and package manager |  |  |
|
||||
| Discovery/APK | [apkleaks](https://github.com/dwisiswant0/apkleaks) | Scanning APK file for URIs, endpoints & secrets. |  |  |
|
||||
| Discovery/CRAWL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  |
|
||||
| Discovery/CRAWL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of "commoncrawl.org" |  |  |
|
||||
| Discovery/CRAWL | [go-dork](https://github.com/dwisiswant0/go-dork) | The fastest dork scanner written in Go. |  |  |
|
||||
| Discovery/CRAWL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  |
|
||||
| Discovery/CRAWL | [hakrawler](https://github.com/hakluke/hakrawler) | Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |  |  |
|
||||
| Discovery/CRAWL | [urlgrab](https://github.com/IAmStoxe/urlgrab) | A golang utility to spider through a website searching for additional links. |  |  |
|
||||
| Discovery/URL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  |
|
||||
| Discovery/URL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of "commoncrawl.org" |  |  |
|
||||
| Discovery/URL | [go-dork](https://github.com/dwisiswant0/go-dork) | The fastest dork scanner written in Go. |  |  |
|
||||
| Discovery/URL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  |
|
||||
| Discovery/URL | [hakrawler](https://github.com/hakluke/hakrawler) | Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |  |  |
|
||||
| Discovery/URL | [urlgrab](https://github.com/IAmStoxe/urlgrab) | A golang utility to spider through a website searching for additional links. |  |  |
|
||||
| Discovery/DNS | [DNSDumpster](https://dnsdumpster.com) | Online dns recon & research, find & lookup dns records| | |
|
||||
| Discovery/DNS | [SecurityTrails](https://securitytrails.com) | Online dns / subdomain / recon tool| | |
|
||||
| Discovery/DNS | [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |  |  |
|
||||
@ -98,6 +100,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
||||
| Discovery/TKOV | [SubOver](https://github.com/Ice3man543/SubOver) | A Powerful Subdomain Takeover Tool |  |  |
|
||||
| Discovery/TKOV | [can-i-take-over-xyz](https://github.com/EdOverflow/can-i-take-over-xyz) | "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records. |  |  |
|
||||
| Discovery/TKOV | [subjack](https://github.com/haccer/subjack) | Subdomain Takeover tool written in Go |  |  |
|
||||
| Discovery/URL | [urlhunter](https://github.com/utkusen/urlhunter) | a recon tool that allows searching on URLs that are exposed via shortener services |  |  |
|
||||
| Discovery/URL | [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain |  |  |
|
||||
| Discovery/VULN | [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services |  |  |
|
||||
| Fetch/HTTP | [htcat](https://github.com/htcat/htcat) | Parallel and Pipelined HTTP GET Utility |  |  |
|
||||
@ -134,6 +137,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
||||
| Scanner/SSL | [testssl.sh](https://github.com/drwetter/testssl.sh) | Testing TLS/SSL encryption anywhere on any port |  |  |
|
||||
| Scanner/SSRF | [SSRFmap](https://github.com/swisskyrepo/SSRFmap) | Automatic SSRF fuzzer and exploitation tool |  |  |
|
||||
| Scanner/SSRF | [ssrf-sheriff](https://github.com/teknogeek/ssrf-sheriff) | A simple SSRF-testing sheriff written in Go |  |  |
|
||||
| Scanner/WP | [wprecon](https://github.com/blackcrw/wprecon) | Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go. |  |  |
|
||||
| Scanner/WP | [wpscan](https://github.com/wpscanteam/wpscan) | WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |  |  |
|
||||
| Scanner/WVS | [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. |  |  |
|
||||
| Scanner/WVS | [arachni](https://github.com/Arachni/arachni) | Web Application Security Scanner Framework |  |  |
|
||||
@ -188,6 +192,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
||||
| Utility/S3 | [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. |  |  |
|
||||
| Utility/SHOT | [gowitness](https://github.com/sensepost/gowitness) | 🔍 gowitness - a golang, web screenshot utility using Chrome Headless |  |  |
|
||||
| Utility/SNIPPET | [pet](https://github.com/knqyf263/pet) | Simple command-line snippet manager, written in Go. |  |  |
|
||||
| Utility/Scripts | [tiscripts](https://github.com/defparam/tiscripts) | Turbo Intruder Scripts |  |  |
|
||||
| Utility/TEMPLATE | [bountyplz](https://github.com/fransr/bountyplz) | Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) |  |  |
|
||||
| Utility/TEMPLATE | [template-generator](https://github.com/fransr/template-generator) | A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |  |  |
|
||||
| Utility/URL | [anew](https://github.com/tomnomnom/anew) | A tool for adding new lines to files, skipping duplicates |  |  |
|
||||
|
||||
96
data.json
96
data.json
@ -544,7 +544,7 @@
|
||||
}
|
||||
},
|
||||
"Photon": {
|
||||
"Data": "| Discovery/CRAWL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  |",
|
||||
"Data": "| Discovery/URL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  |",
|
||||
"Description": "Incredibly fast crawler designed for OSINT. ",
|
||||
"Install": {
|
||||
"Linux": "git clone https://github.com/s0md3v/Photon ; cd Photon; pip3 install -r requirements.txt",
|
||||
@ -831,22 +831,6 @@
|
||||
"Windows": "cd VHostScan ; git pull -v ; pip3 install -r requirements.txt"
|
||||
}
|
||||
},
|
||||
"xsscrapy":{
|
||||
"Data": "| Scanner/XSS | [xsscrapy](https://github.com/DanMcInerney/xsscrapy) | XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. |  |  |",
|
||||
"Description": "XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ",
|
||||
"Install": {
|
||||
"Linux": "git clone https://github.com/DanMcInerney/xsscrapy.git ; cd xsscrapy; pip install -r requirements.txt",
|
||||
"MacOS": "git clone https://github.com/DanMcInerney/xsscrapy.git ; cd xsscrapy; pip install -r requirements.txt",
|
||||
"Windows": "git clone https://github.com/DanMcInerney/xsscrapy.git ; cd xsscrapy; pip install -r requirements.txt"
|
||||
},
|
||||
"Method": "XSS",
|
||||
"Type": "Scanner",
|
||||
"Update": {
|
||||
"Linux": "cd xsscrapy; git pull -v ; pip install -r requirements.txt",
|
||||
"MacOS": "cd xsscrapy; git pull -v ; pip install -r requirements.txt",
|
||||
"Windows": "cd xsscrapy; git pull -v ; pip install -r requirements.txt"
|
||||
}
|
||||
},
|
||||
"XSStrike": {
|
||||
"Data": "| Scanner/XSS | [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. |  |  |",
|
||||
"Description": "Most advanced XSS scanner. ",
|
||||
@ -992,15 +976,15 @@
|
||||
}
|
||||
},
|
||||
"autochrome": {
|
||||
"Type": "Utility",
|
||||
"Data": "| Utility/ENV | [autochrome](https://github.com/nccgroup/autochrome) | This tool downloads, installs, and configures a shiny new copy of Chromium. |  |  |",
|
||||
"Method": "ENV",
|
||||
"Description": "This tool downloads, installs, and configures a shiny new copy of Chromium.",
|
||||
"Install": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
},
|
||||
"Method": "ENV",
|
||||
"Type": "Utility",
|
||||
"Update": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
@ -1088,7 +1072,7 @@
|
||||
}
|
||||
},
|
||||
"cc.py": {
|
||||
"Data": "| Discovery/CRAWL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of \"commoncrawl.org\" |  |  |",
|
||||
"Data": "| Discovery/URL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of \"commoncrawl.org\" |  |  |",
|
||||
"Description": "Extracting URLs of a specific target based on the results of \"commoncrawl.org\" ",
|
||||
"Install": {
|
||||
"Linux": "git clone https://github.com/si9int/cc.py",
|
||||
@ -1504,7 +1488,7 @@
|
||||
}
|
||||
},
|
||||
"go-dork": {
|
||||
"Data": "| Discovery/CRAWL | [go-dork](https://github.com/dwisiswant0/go-dork) | The fastest dork scanner written in Go. |  |  |",
|
||||
"Data": "| Discovery/URL | [go-dork](https://github.com/dwisiswant0/go-dork) | The fastest dork scanner written in Go. |  |  |",
|
||||
"Description": "The fastest dork scanner written in Go. ",
|
||||
"Install": {
|
||||
"Linux": "GO111MODULE=on go get -v github.com/dwisiswant0/go-dork/...",
|
||||
@ -1536,7 +1520,7 @@
|
||||
}
|
||||
},
|
||||
"gospider": {
|
||||
"Data": "| Discovery/CRAWL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  |",
|
||||
"Data": "| Discovery/URL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  |",
|
||||
"Description": "Gospider - Fast web spider written in Go ",
|
||||
"Install": {
|
||||
"Linux": "go get -u github.com/jaeles-project/gospider",
|
||||
@ -1632,7 +1616,7 @@
|
||||
}
|
||||
},
|
||||
"hakrawler": {
|
||||
"Data": "| Discovery/CRAWL | [hakrawler](https://github.com/hakluke/hakrawler) | Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |  |  |",
|
||||
"Data": "| Discovery/URL | [hakrawler](https://github.com/hakluke/hakrawler) | Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |  |  |",
|
||||
"Description": "Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application ",
|
||||
"Install": {
|
||||
"Linux": "go get github.com/hakluke/hakrawler",
|
||||
@ -2479,6 +2463,22 @@
|
||||
"Windows": "cd thc-hydra; git pull -v ; ./configure ; make ; make install"
|
||||
}
|
||||
},
|
||||
"tiscripts": {
|
||||
"Data": "| Utility/Scripts | [tiscripts](https://github.com/defparam/tiscripts) | Turbo Intruder Scripts |  |  |",
|
||||
"Description": "Turbo Intruder Scripts",
|
||||
"Install": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
},
|
||||
"Method": "Scripts",
|
||||
"Type": "Utility",
|
||||
"Update": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
}
|
||||
},
|
||||
"unfurl": {
|
||||
"Data": "| Utility/URL | [unfurl](https://github.com/tomnomnom/unfurl) | Pull out bits of URLs provided on stdin |  |  |",
|
||||
"Description": "Pull out bits of URLs provided on stdin ",
|
||||
@ -2496,7 +2496,7 @@
|
||||
}
|
||||
},
|
||||
"urlgrab": {
|
||||
"Data": "| Discovery/CRAWL | [urlgrab](https://github.com/IAmStoxe/urlgrab) | A golang utility to spider through a website searching for additional links. |  |  |",
|
||||
"Data": "| Discovery/URL | [urlgrab](https://github.com/IAmStoxe/urlgrab) | A golang utility to spider through a website searching for additional links. |  |  |",
|
||||
"Description": "A golang utility to spider through a website searching for additional links. ",
|
||||
"Install": {
|
||||
"Linux": "go get -u github.com/iamstoxe/urlgrab",
|
||||
@ -2511,6 +2511,22 @@
|
||||
"Windows": "go get -u github.com/iamstoxe/urlgrab"
|
||||
}
|
||||
},
|
||||
"urlhunter": {
|
||||
"Type": "Discovery",
|
||||
"Data": "| Discovery/URL | [urlhunter](https://github.com/utkusen/urlhunter) | a recon tool that allows searching on URLs that are exposed via shortener services |  |  |",
|
||||
"Method": "URL",
|
||||
"Description": "a recon tool that allows searching on URLs that are exposed via shortener services",
|
||||
"Install": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
},
|
||||
"Update": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
}
|
||||
},
|
||||
"urlprobe": {
|
||||
"Data": "| Utility/URL | [urlprobe](https://github.com/1ndianl33t/urlprobe) | Urls status code \u0026 content length checker |  |  |",
|
||||
"Description": "Urls status code \u0026 content length checker ",
|
||||
@ -2591,6 +2607,22 @@
|
||||
"Windows": "pip3 install wfuzz"
|
||||
}
|
||||
},
|
||||
"wprecon": {
|
||||
"Data": "| Scanner/WP | [wprecon](https://github.com/blackcrw/wprecon) | Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go. |  |  |",
|
||||
"Description": "Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.",
|
||||
"Install": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
},
|
||||
"Method": "WP",
|
||||
"Type": "Scanner",
|
||||
"Update": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
}
|
||||
},
|
||||
"wpscan": {
|
||||
"Data": "| Scanner/WP | [wpscan](https://github.com/wpscanteam/wpscan) | WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |  |  |",
|
||||
"Description": "WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. ",
|
||||
@ -2639,6 +2671,22 @@
|
||||
"Windows": "cd xss-cheatsheet-data ; git pull -v"
|
||||
}
|
||||
},
|
||||
"xsscrapy": {
|
||||
"Data": "| Scanner/XSS | [xsscrapy](https://github.com/DanMcInerney/xsscrapy) | XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. |  |  |",
|
||||
"Description": "XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi. ",
|
||||
"Install": {
|
||||
"Linux": "git clone https://github.com/DanMcInerney/xsscrapy.git ; cd xsscrapy; pip install -r requirements.txt",
|
||||
"MacOS": "git clone https://github.com/DanMcInerney/xsscrapy.git ; cd xsscrapy; pip install -r requirements.txt",
|
||||
"Windows": "git clone https://github.com/DanMcInerney/xsscrapy.git ; cd xsscrapy; pip install -r requirements.txt"
|
||||
},
|
||||
"Method": "XSS",
|
||||
"Type": "Scanner",
|
||||
"Update": {
|
||||
"Linux": "cd xsscrapy; git pull -v ; pip install -r requirements.txt",
|
||||
"MacOS": "cd xsscrapy; git pull -v ; pip install -r requirements.txt",
|
||||
"Windows": "cd xsscrapy; git pull -v ; pip install -r requirements.txt"
|
||||
}
|
||||
},
|
||||
"xsser": {
|
||||
"Data": "| Scanner/XSS | [xsser](https://github.com/epsylon/xsser) | Cross Site \"Scripter\" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. |  |  |",
|
||||
"Description": "Cross Site \"Scripter\" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. ",
|
||||
|
||||
@ -1,8 +1,6 @@
|
||||
<h1 align="center">
|
||||
<br>
|
||||
<a href=""><img src="https://user-images.githubusercontent.com/13212227/91529103-aba4b400-e943-11ea-9983-3b5aba7dd25c.png" alt="" width="300px;"></a>
|
||||
<br>
|
||||
Web Hacker's Weapons
|
||||
<a href=""><img src="https://user-images.githubusercontent.com/13212227/104400969-9f3d9280-5596-11eb-80f4-864effae95fc.png" alt="" width="500px;"></a>
|
||||
<br>
|
||||
<img src="https://img.shields.io/github/languages/top/hahwul/WebHackersWeapons?style=flat">
|
||||
<img src="https://img.shields.io/github/last-commit/hahwul/WebHackersWeapons?style=flat">
|
||||
@ -14,6 +12,10 @@
|
||||
</h1>
|
||||
A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
|
||||
|
||||
## Family project
|
||||
[](https://github.com/hahwul/WebHackersWeapons)
|
||||
[](https://github.com/hahwul/MobileHackersWeapons)
|
||||
|
||||
## Table of Contents
|
||||
- [WHW-Tools](https://whw-tools.hahwul.com)
|
||||
- [Weapons](#weapons)
|
||||
|
||||
Loading…
Reference in New Issue
Block a user