From c093551fd5ee7512ac4e12fa6c926db2f4eff4fa Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=ED=95=98=ED=9B=8C?= Date: Wed, 8 Apr 2020 00:56:07 +0900 Subject: [PATCH] Update README.md --- README.md | 200 +++++++++++++++--------------------------------------- 1 file changed, 56 insertions(+), 144 deletions(-) diff --git a/README.md b/README.md index 005ed3e..a677183 100644 --- a/README.md +++ b/README.md @@ -7,160 +7,72 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting -## Category -- [Weapons](#weapons) - - [Main Weapon](#main-weapon) - - [Subdomain Enumeration](#subdomain-enumeration) - - [Fetch path and host](#fetch-path-and-host) - - [Port scanner](#port-scanner) - - [Web Discovery](#web-discovery) - - [Web Vulnerability Scanner](#web-vulnerability-scanner) - - [XSS](#xss) - - [CSRF](#csrf) - - [Path traversal / Directory traversal / LFI](#path-traversal--directory-traversal--lfi) - - [Command Injection](#command-injection) - - [SQL Injection](#sql-injection) - - [NoSQL Injection](#nosql-injection) - - [SSRF](#ssrf) - - [CORS Misconfiguration](#cors-misconfiguration) - - [WebSocket](#websocket) - - [Cloud Security](#cloud-security) - - [Utility for hackers](#utility-for-hackers) - - [Online tools](#online-tools) -- [Contribute](#contribute-and-contributor) - ## Weapons - -## Fetch path and host - -| Name | Description | Popularity | Language | Metadata | +| Type | Name | Description | Popularity | Language | | ---------- | :---------- | :----------: | :----------: | :----------: | -| [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers | ![](https://img.shields.io/github/stars/tomnomnom/httprobe) | ![](https://img.shields.io/github/languages/top/tomnomnom/httprobe) | ![](https://img.shields.io/github/repo-size/tomnomnom/httprobe)
![](https://img.shields.io/github/license/tomnomnom/httprobe)
![](https://img.shields.io/github/forks/tomnomnom/httprobe)
![](https://img.shields.io/github/watchers/tomnomnom/httprobe) | -| [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts | ![](https://img.shields.io/github/stars/tomnomnom/meg) | ![](https://img.shields.io/github/languages/top/tomnomnom/meg) | ![](https://img.shields.io/github/repo-size/tomnomnom/meg)
![](https://img.shields.io/github/license/tomnomnom/meg)
![](https://img.shields.io/github/forks/tomnomnom/meg)
![](https://img.shields.io/github/watchers/tomnomnom/meg) | - -## Web Discovery - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. | ![](https://img.shields.io/github/stars/s0md3v/Arjun) | ![](https://img.shields.io/github/languages/top/s0md3v/Arjun) | ![](https://img.shields.io/github/repo-size/s0md3v/Arjun)
![](https://img.shields.io/github/license/s0md3v/Arjun)
![](https://img.shields.io/github/forks/s0md3v/Arjun)
![](https://img.shields.io/github/watchers/s0md3v/Arjun) | -| [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. | ![](https://img.shields.io/github/stars/s0md3v/Photon) | ![](https://img.shields.io/github/languages/top/s0md3v/Photon) | ![](https://img.shields.io/github/repo-size/s0md3v/Photon)
![](https://img.shields.io/github/license/s0md3v/Photon)
![](https://img.shields.io/github/forks/s0md3v/Photon)
![](https://img.shields.io/github/watchers/s0md3v/Photon) | -| [ReconDog](https://github.com/s0md3v/ReconDog) | Reconnaissance Swiss Army Knife | ![](https://img.shields.io/github/stars/s0md3v/ReconDog) | ![](https://img.shields.io/github/languages/top/s0md3v/ReconDog) | ![](https://img.shields.io/github/repo-size/s0md3v/ReconDog)
![](https://img.shields.io/github/license/s0md3v/ReconDog)
![](https://img.shields.io/github/forks/s0md3v/ReconDog)
![](https://img.shields.io/github/watchers/s0md3v/ReconDog) | -| [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. | ![](https://img.shields.io/github/stars/projectdiscovery/dnsprobe) | ![](https://img.shields.io/github/languages/top/projectdiscovery/dnsprobe) | ![](https://img.shields.io/github/repo-size/projectdiscovery/dnsprobe)
![](https://img.shields.io/github/license/projectdiscovery/dnsprobe)
![](https://img.shields.io/github/forks/projectdiscovery/dnsprobe)
![](https://img.shields.io/github/watchers/projectdiscovery/dnsprobe) | -| [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go | ![](https://img.shields.io/github/stars/jaeles-project/gospider) | ![](https://img.shields.io/github/languages/top/jaeles-project/gospider) | ![](https://img.shields.io/github/repo-size/jaeles-project/gospider)
![](https://img.shields.io/github/license/jaeles-project/gospider)
![](https://img.shields.io/github/forks/jaeles-project/gospider)
![](https://img.shields.io/github/watchers/jaeles-project/gospider) | -| [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. | ![](https://img.shields.io/github/stars/projectdiscovery/shuffledns) | ![](https://img.shields.io/github/languages/top/projectdiscovery/shuffledns) | ![](https://img.shields.io/github/repo-size/projectdiscovery/shuffledns)
![](https://img.shields.io/github/license/projectdiscovery/shuffledns)
![](https://img.shields.io/github/forks/projectdiscovery/shuffledns)
![](https://img.shields.io/github/watchers/projectdiscovery/shuffledns) | -| [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain | ![](https://img.shields.io/github/stars/tomnomnom/waybackurls) | ![](https://img.shields.io/github/languages/top/tomnomnom/waybackurls) | ![](https://img.shields.io/github/repo-size/tomnomnom/waybackurls)
![](https://img.shields.io/github/license/tomnomnom/waybackurls)
![](https://img.shields.io/github/forks/tomnomnom/waybackurls)
![](https://img.shields.io/github/watchers/tomnomnom/waybackurls) | - -## XSS - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. | ![](https://img.shields.io/github/stars/s0md3v/XSStrike) | ![](https://img.shields.io/github/languages/top/s0md3v/XSStrike) | ![](https://img.shields.io/github/repo-size/s0md3v/XSStrike)
![](https://img.shields.io/github/license/s0md3v/XSStrike)
![](https://img.shields.io/github/forks/s0md3v/XSStrike)
![](https://img.shields.io/github/watchers/s0md3v/XSStrike) | -| [Xspear](https://github.com/hahwul/Xspear) | Powerfull XSS Scanning and Parameter analysis tool&gem | ![](https://img.shields.io/github/stars/hahwul/Xspear) | ![](https://img.shields.io/github/languages/top/hahwul/Xspear) | ![](https://img.shields.io/github/repo-size/hahwul/Xspear)
![](https://img.shields.io/github/license/hahwul/Xspear)
![](https://img.shields.io/github/forks/hahwul/Xspear)
![](https://img.shields.io/github/watchers/hahwul/Xspear) | - -## SQL Injection - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool | ![](https://img.shields.io/github/stars/sqlmapproject/sqlmap) | ![](https://img.shields.io/github/languages/top/sqlmapproject/sqlmap) | ![](https://img.shields.io/github/repo-size/sqlmapproject/sqlmap)
![](https://img.shields.io/github/license/sqlmapproject/sqlmap)
![](https://img.shields.io/github/forks/sqlmapproject/sqlmap)
![](https://img.shields.io/github/watchers/sqlmapproject/sqlmap) | -| [sqlninja](https://github.com/xxgrunge/sqlninja) | SQL Injection Tool | ![](https://img.shields.io/github/stars/xxgrunge/sqlninja) | ![](https://img.shields.io/github/languages/top/xxgrunge/sqlninja) | ![](https://img.shields.io/github/repo-size/xxgrunge/sqlninja)
![](https://img.shields.io/github/license/xxgrunge/sqlninja)
![](https://img.shields.io/github/forks/xxgrunge/sqlninja)
![](https://img.shields.io/github/watchers/xxgrunge/sqlninja) | - -## NoSQL Injection - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [NoSQLMap](https://github.com/codingo/NoSQLMap) | Automated NoSQL database enumeration and web application exploitation tool. | ![](https://img.shields.io/github/stars/codingo/NoSQLMap) | ![](https://img.shields.io/github/languages/top/codingo/NoSQLMap) | ![](https://img.shields.io/github/repo-size/codingo/NoSQLMap)
![](https://img.shields.io/github/license/codingo/NoSQLMap)
![](https://img.shields.io/github/forks/codingo/NoSQLMap)
![](https://img.shields.io/github/watchers/codingo/NoSQLMap) | - -## CORS Misconfiguration - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [Corsy](https://github.com/s0md3v/Corsy) | CORS Misconfiguration Scanner | ![](https://img.shields.io/github/stars/s0md3v/Corsy) | ![](https://img.shields.io/github/languages/top/s0md3v/Corsy) | ![](https://img.shields.io/github/repo-size/s0md3v/Corsy)
![](https://img.shields.io/github/license/s0md3v/Corsy)
![](https://img.shields.io/github/forks/s0md3v/Corsy)
![](https://img.shields.io/github/watchers/s0md3v/Corsy) | - -## Cloud Security - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. | ![](https://img.shields.io/github/stars/hahwul/s3reverse) | ![](https://img.shields.io/github/languages/top/hahwul/s3reverse) | ![](https://img.shields.io/github/repo-size/hahwul/s3reverse)
![](https://img.shields.io/github/license/hahwul/s3reverse)
![](https://img.shields.io/github/forks/hahwul/s3reverse)
![](https://img.shields.io/github/watchers/hahwul/s3reverse) | - -## Main Weapon - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | - -## Subdomain Enumeration - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery | ![](https://img.shields.io/github/stars/OWASP/Amass) | ![](https://img.shields.io/github/languages/top/OWASP/Amass) | ![](https://img.shields.io/github/repo-size/OWASP/Amass)
![](https://img.shields.io/github/license/OWASP/Amass)
![](https://img.shields.io/github/forks/OWASP/Amass)
![](https://img.shields.io/github/watchers/OWASP/Amass) | -| [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain | ![](https://img.shields.io/github/stars/tomnomnom/assetfinder) | ![](https://img.shields.io/github/languages/top/tomnomnom/assetfinder) | ![](https://img.shields.io/github/repo-size/tomnomnom/assetfinder)
![](https://img.shields.io/github/license/tomnomnom/assetfinder)
![](https://img.shields.io/github/forks/tomnomnom/assetfinder)
![](https://img.shields.io/github/watchers/tomnomnom/assetfinder) | -| [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. | ![](https://img.shields.io/github/stars/Edu4rdSHL/findomain) | ![](https://img.shields.io/github/languages/top/Edu4rdSHL/findomain) | ![](https://img.shields.io/github/repo-size/Edu4rdSHL/findomain)
![](https://img.shields.io/github/license/Edu4rdSHL/findomain)
![](https://img.shields.io/github/forks/Edu4rdSHL/findomain)
![](https://img.shields.io/github/watchers/Edu4rdSHL/findomain) | -| [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. | ![](https://img.shields.io/github/stars/projectdiscovery/subfinder) | ![](https://img.shields.io/github/languages/top/projectdiscovery/subfinder) | ![](https://img.shields.io/github/repo-size/projectdiscovery/subfinder)
![](https://img.shields.io/github/license/projectdiscovery/subfinder)
![](https://img.shields.io/github/forks/projectdiscovery/subfinder)
![](https://img.shields.io/github/watchers/projectdiscovery/subfinder) | - -## Port scanner - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. | ![](https://img.shields.io/github/stars/robertdavidgraham/masscan) | ![](https://img.shields.io/github/languages/top/robertdavidgraham/masscan) | ![](https://img.shields.io/github/repo-size/robertdavidgraham/masscan)
![](https://img.shields.io/github/license/robertdavidgraham/masscan)
![](https://img.shields.io/github/forks/robertdavidgraham/masscan)
![](https://img.shields.io/github/watchers/robertdavidgraham/masscan) | -| [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests | ![](https://img.shields.io/github/stars/projectdiscovery/naabu) | ![](https://img.shields.io/github/languages/top/projectdiscovery/naabu) | ![](https://img.shields.io/github/repo-size/projectdiscovery/naabu)
![](https://img.shields.io/github/license/projectdiscovery/naabu)
![](https://img.shields.io/github/forks/projectdiscovery/naabu)
![](https://img.shields.io/github/watchers/projectdiscovery/naabu) | -| [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. | ![](https://img.shields.io/github/stars/nmap/nmap) | ![](https://img.shields.io/github/languages/top/nmap/nmap) | ![](https://img.shields.io/github/repo-size/nmap/nmap)
![](https://img.shields.io/github/license/nmap/nmap)
![](https://img.shields.io/github/forks/nmap/nmap)
![](https://img.shields.io/github/watchers/nmap/nmap) | - -## Web Vulnerability Scanner - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services | ![](https://img.shields.io/github/stars/s0md3v/Silver) | ![](https://img.shields.io/github/languages/top/s0md3v/Silver) | ![](https://img.shields.io/github/repo-size/s0md3v/Silver)
![](https://img.shields.io/github/license/s0md3v/Silver)
![](https://img.shields.io/github/forks/s0md3v/Silver)
![](https://img.shields.io/github/watchers/s0md3v/Silver) | -| [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. | ![](https://img.shields.io/github/stars/s0md3v/Striker) | ![](https://img.shields.io/github/languages/top/s0md3v/Striker) | ![](https://img.shields.io/github/repo-size/s0md3v/Striker)
![](https://img.shields.io/github/license/s0md3v/Striker)
![](https://img.shields.io/github/forks/s0md3v/Striker)
![](https://img.shields.io/github/watchers/s0md3v/Striker) | -| [a2sv](https://github.com/hahwul/a2sv) | Auto Scanning to SSL Vulnerability | ![](https://img.shields.io/github/stars/hahwul/a2sv) | ![](https://img.shields.io/github/languages/top/hahwul/a2sv) | ![](https://img.shields.io/github/repo-size/hahwul/a2sv)
![](https://img.shields.io/github/license/hahwul/a2sv)
![](https://img.shields.io/github/forks/hahwul/a2sv)
![](https://img.shields.io/github/watchers/hahwul/a2sv) | - -## CSRF - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | - -## WebSocket - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) | websocket-connection-smuggler | ![](https://img.shields.io/github/stars/hahwul/websocket-connection-smuggler) | ![](https://img.shields.io/github/languages/top/hahwul/websocket-connection-smuggler) | ![](https://img.shields.io/github/repo-size/hahwul/websocket-connection-smuggler)
![](https://img.shields.io/github/license/hahwul/websocket-connection-smuggler)
![](https://img.shields.io/github/forks/hahwul/websocket-connection-smuggler)
![](https://img.shields.io/github/watchers/hahwul/websocket-connection-smuggler) | - -## Path traversal / Directory traversal / LFI - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | - -## Command Injection - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | - -## SSRF - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | - -## Utility for hackers - -| Name | Description | Popularity | Language | Metadata | -| ---------- | :---------- | :----------: | :----------: | :----------: | -| [ftc](https://github.com/hahwul/ftc) | simple copy to file to clipboard | ![](https://img.shields.io/github/stars/hahwul/ftc) | ![](https://img.shields.io/github/languages/top/hahwul/ftc) | ![](https://img.shields.io/github/repo-size/hahwul/ftc)
![](https://img.shields.io/github/license/hahwul/ftc)
![](https://img.shields.io/github/forks/hahwul/ftc)
![](https://img.shields.io/github/watchers/hahwul/ftc) | -| [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things | ![](https://img.shields.io/github/stars/tomnomnom/gf) | ![](https://img.shields.io/github/languages/top/tomnomnom/gf) | ![](https://img.shields.io/github/repo-size/tomnomnom/gf)
![](https://img.shields.io/github/license/tomnomnom/gf)
![](https://img.shields.io/github/forks/tomnomnom/gf)
![](https://img.shields.io/github/watchers/tomnomnom/gf) | -| [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! | ![](https://img.shields.io/github/stars/tomnomnom/gron) | ![](https://img.shields.io/github/languages/top/tomnomnom/gron) | ![](https://img.shields.io/github/repo-size/tomnomnom/gron)
![](https://img.shields.io/github/license/tomnomnom/gron)
![](https://img.shields.io/github/forks/tomnomnom/gron)
![](https://img.shields.io/github/watchers/tomnomnom/gron) | +| Discovery/CRAWL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. | ![](https://img.shields.io/github/stars/s0md3v/Photon) | ![](https://img.shields.io/github/languages/top/s0md3v/Photon) | +| Discovery/CRAWL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go | ![](https://img.shields.io/github/stars/jaeles-project/gospider) | ![](https://img.shields.io/github/languages/top/jaeles-project/gospider) | +| Discovery/DNS | [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. | ![](https://img.shields.io/github/stars/projectdiscovery/dnsprobe) | ![](https://img.shields.io/github/languages/top/projectdiscovery/dnsprobe) | +| Discovery/DNS | [shuffledns](https://github.com/projectdiscovery/shuffledns) | shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. | ![](https://img.shields.io/github/stars/projectdiscovery/shuffledns) | ![](https://img.shields.io/github/languages/top/projectdiscovery/shuffledns) | +| Discovery/DOMAIN | [Amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery | ![](https://img.shields.io/github/stars/OWASP/Amass) | ![](https://img.shields.io/github/languages/top/OWASP/Amass) | +| Discovery/DOMAIN | [assetfinder](https://github.com/tomnomnom/assetfinder) | Find domains and subdomains related to a given domain | ![](https://img.shields.io/github/stars/tomnomnom/assetfinder) | ![](https://img.shields.io/github/languages/top/tomnomnom/assetfinder) | +| Discovery/DOMAIN | [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest and cross-platform subdomain enumerator, do not waste your time. | ![](https://img.shields.io/github/stars/Edu4rdSHL/findomain) | ![](https://img.shields.io/github/languages/top/Edu4rdSHL/findomain) | +| Discovery/DOMAIN | [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. | ![](https://img.shields.io/github/stars/projectdiscovery/subfinder) | ![](https://img.shields.io/github/languages/top/projectdiscovery/subfinder) | +| Discovery/HTTP | [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. | ![](https://img.shields.io/github/stars/s0md3v/Arjun) | ![](https://img.shields.io/github/languages/top/s0md3v/Arjun) | +| Discovery/PORT | [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. | ![](https://img.shields.io/github/stars/robertdavidgraham/masscan) | ![](https://img.shields.io/github/languages/top/robertdavidgraham/masscan) | +| Discovery/PORT | [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests | ![](https://img.shields.io/github/stars/projectdiscovery/naabu) | ![](https://img.shields.io/github/languages/top/projectdiscovery/naabu) | +| Discovery/PORT | [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. | ![](https://img.shields.io/github/stars/nmap/nmap) | ![](https://img.shields.io/github/languages/top/nmap/nmap) | +| Discovery/URL | [waybackurls](https://github.com/tomnomnom/waybackurls) | Fetch all the URLs that the Wayback Machine knows about for a domain | ![](https://img.shields.io/github/stars/tomnomnom/waybackurls) | ![](https://img.shields.io/github/languages/top/tomnomnom/waybackurls) | +| Discovery/VULN | [Silver](https://github.com/s0md3v/Silver) | Mass scan IPs for vulnerable services | ![](https://img.shields.io/github/stars/s0md3v/Silver) | ![](https://img.shields.io/github/languages/top/s0md3v/Silver) | +| Fetch/TOM | [httprobe](https://github.com/tomnomnom/httprobe) | Take a list of domains and probe for working HTTP and HTTPS servers | ![](https://img.shields.io/github/stars/tomnomnom/httprobe) | ![](https://img.shields.io/github/languages/top/tomnomnom/httprobe) | +| Fetch/TOM | [meg](https://github.com/tomnomnom/meg) | Fetch many paths for many hosts - without killing the hosts | ![](https://img.shields.io/github/stars/tomnomnom/meg) | ![](https://img.shields.io/github/languages/top/tomnomnom/meg) | +| Fetch/WSOCK | [websocket-connection-smuggler](https://github.com/hahwul/websocket-connection-smuggler) | websocket-connection-smuggler | ![](https://img.shields.io/github/stars/hahwul/websocket-connection-smuggler) | ![](https://img.shields.io/github/languages/top/hahwul/websocket-connection-smuggler) | +| Scanner/CORS | [Corsy](https://github.com/s0md3v/Corsy) | CORS Misconfiguration Scanner | ![](https://img.shields.io/github/stars/s0md3v/Corsy) | ![](https://img.shields.io/github/languages/top/s0md3v/Corsy) | +| Scanner/NOSQL | [NoSQLMap](https://github.com/codingo/NoSQLMap) | Automated NoSQL database enumeration and web application exploitation tool. | ![](https://img.shields.io/github/stars/codingo/NoSQLMap) | ![](https://img.shields.io/github/languages/top/codingo/NoSQLMap) | +| Scanner/SQL | [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool | ![](https://img.shields.io/github/stars/sqlmapproject/sqlmap) | ![](https://img.shields.io/github/languages/top/sqlmapproject/sqlmap) | +| Scanner/SQL | [sqlninja](https://github.com/xxgrunge/sqlninja) | SQL Injection Tool | ![](https://img.shields.io/github/stars/xxgrunge/sqlninja) | ![](https://img.shields.io/github/languages/top/xxgrunge/sqlninja) | +| Scanner/SSL | [a2sv](https://github.com/hahwul/a2sv) | Auto Scanning to SSL Vulnerability | ![](https://img.shields.io/github/stars/hahwul/a2sv) | ![](https://img.shields.io/github/languages/top/hahwul/a2sv) | +| Scanner/WVS | [Striker](https://github.com/s0md3v/Striker) | Striker is an offensive information and vulnerability scanner. | ![](https://img.shields.io/github/stars/s0md3v/Striker) | ![](https://img.shields.io/github/languages/top/s0md3v/Striker) | +| Scanner/XSS | [XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS scanner. | ![](https://img.shields.io/github/stars/s0md3v/XSStrike) | ![](https://img.shields.io/github/languages/top/s0md3v/XSStrike) | +| Scanner/XSS | [xspear](https://github.com/hahwul/xspear) | Powerfull XSS Scanning and Parameter analysis tool&gem | ![](https://img.shields.io/github/stars/hahwul/xspear) | ![](https://img.shields.io/github/languages/top/hahwul/xspear) | +| Utility/CLIP | [ftc](https://github.com/hahwul/ftc) | simple copy to file to clipboard | ![](https://img.shields.io/github/stars/hahwul/ftc) | ![](https://img.shields.io/github/languages/top/hahwul/ftc) | +| Utility/GREP | [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things | ![](https://img.shields.io/github/stars/tomnomnom/gf) | ![](https://img.shields.io/github/languages/top/tomnomnom/gf) | +| Utility/JSON | [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! | ![](https://img.shields.io/github/stars/tomnomnom/gron) | ![](https://img.shields.io/github/languages/top/tomnomnom/gron) | +| Utility/S3 | [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. | ![](https://img.shields.io/github/stars/hahwul/s3reverse) | ![](https://img.shields.io/github/languages/top/hahwul/s3reverse) | ## Contribute and Contributor -### Usage of weapon-md +### Usage of add-tool ``` -./weapon-md -Usage of ./weapon-md: +./add-tool +Usage of ./add-tool: -isFirst if you add new type, it use -url string - github / gitlab / bitbucket url + any url ``` ### Three Procedures for the Contribute -- First, generate markdown code using `weapon-md` +- First, your tool append `data.json` using `add-tool ``` -$ ./weapon-md -url https://github.com/hahwul/xspear -| [xspear](https://github.com/hahwul/xspear) | Powerfull XSS Scanning and Parameter analysis tool&gem | ![](https://img.shields.io/github/stars/hahwul/xspear) | ![](https://img.shields.io/github/languages/top/hahwul/xspear) | ![](https://img.shields.io/github/repo-size/hahwul/xspear)
![](https://img.shields.io/github/license/hahwul/xspear)
![](https://img.shields.io/github/forks/hahwul/xspear)
![](https://img.shields.io/github/watchers/hahwul/xspear) | +$ ./add-tool -url https://github.com/sqlmapproject/sqlmap +Successfully Opened type.lst +[0] Army-Knife +[1] Discovery +[2] Fetch +[3] Scanner +[4] Utility +[+] What is type? +3 +Scanner +[+] What is method(e.g XSS, WVS, SSL, ETC..)? +SQL +Successfully Opened data.json + ``` -- Second, Give me PR or Add issue with output code
+- Second, Give me PR or Add issue with data.json
- Third, There's no third. + +### Distribute +``` +$ ./distribute-readme +=> show new README file +```