Awesome-Mirrors/cyber-security-resources

mirror of https://github.com/The-Art-of-Hacking/h4cker.git synced 2025-01-25 13:57:17 -05:00

History

Omar Santos 87028c20cf

Update intro_to_nuclei.md

2024-07-18 14:47:00 -04:00

..

assessment_mindset.xmind

Add files via upload

2022-05-26 11:08:24 -04:00

assessment-mindset.png

Add files via upload

2022-05-26 11:05:55 -04:00

bug-bounty-methodology-jhaddix.jpeg

Add files via upload

2022-05-26 11:05:55 -04:00

intro_to_nuclei.md

Update intro_to_nuclei.md

2024-07-18 14:47:00 -04:00

osint-domain-name.jpeg

Add files via upload

2022-05-26 11:05:55 -04:00

README.md

Update README.md

2024-07-01 13:02:33 -04:00

recon_ng_oreilly.md

Create recon_ng_oreilly.md

2024-07-01 13:28:14 -04:00

smb_enumeration_tips.md

Create smb_enumeration_tips.md

2021-07-18 23:48:12 -04:00

stealth_nmap.md

Create stealth_nmap.md

2024-06-27 11:26:40 -04:00

visual-guide-to-recon.jfif

Add files via upload

2022-05-26 11:05:55 -04:00

webapp_recon.md

Update webapp_recon.md

2024-07-01 11:59:54 -04:00

README.md

Active and Passive Reconnaissance Tips and Tools

Passive Recon

Website Exploration and "Google Hacking"

censys - https://censys.io
Spyse - https://spyse.com
netcraft - https://searchdns.netcraft.com
Google Hacking Database (GHDB) - https://www.exploit-db.com/google-hacking-database
ExifTool - https://www.sno.phy.queensu.ca/~phil/exiftool
Certficate Search - https://crt.sh/
Huge TLS/SSL certificate DB with advanced search - https://certdb.com
Google Transparency Report - https://transparencyreport.google.com/https/certificates
SiteDigger - http://www.mcafee.com/us/downloads/free-tools/sitedigger.aspx

A tool to scrape LinkedIn: https://github.com/dchrastil/TTSL
cree.py http://ilektrojohn.github.com/creepy

Whois

WHOIS information is based upon a tree hierarchy. ICANN (IANA) is the authoritative registry for all of the TLDs and is a great starting point for all manual WHOIS queries.

BGP looking glasses

BGP4 - http://www.bgp4.as/looking-glasses
BPG6 - http://lg.he.net/

DNS

dnsenum - http://code.google.com/p/dnsenum
dnsmap - http://code.google.com/p/dnsmap
dnsrecon - http://www.darkoperator.com/tools-and-scripts
dnstracer - http://www.mavetju.org/unix/dnstracer.php
dnswalk - http://sourceforge.net/projects/dnswalk

Dark Web Research

Search Engines for Academic Research
See additional information under the OSINT Dark Web OSINT Tools section

Other Great Intelligence Gathering Sources and Tools

Resources from Pentest-standard.org - http://www.pentest-standard.org/index.php/PTES_Technical_Guidelines#Intelligence_Gathering

Active Recon