LeeBrotherston / badflare
OSINT tool for discovering the real IP addresses of services which are behind Cloudflare but not properly locked down
☆133Updated 8 months ago
Alternatives and similar repositories for badflare:
Users that are interested in badflare are comparing it to the libraries listed below
- Wordlists handcrafted (and automated) with ♥☆213Updated 9 months ago
- Turns any junk text into a usable wordlist for brute-forcing.☆218Updated 10 months ago
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆344Updated last year
- IP Lookups for Open Ports and Vulnerabilities from internetdb.shodan.io☆121Updated 2 years ago
- Filter and enrich a list of subdomains by level☆198Updated last year
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆172Updated last week
- WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find ent…☆118Updated 2 years ago
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆126Updated 2 years ago
- A projectdiscovery driven attack surface monitoring bot powered by axiom☆180Updated 2 years ago
- ☆147Updated last year
- This could have been a bash one-liner but guess what. It's a small Go tool that lists the trending CVEs from cvetrends.com☆105Updated 2 years ago
- A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representati…☆86Updated last year
- Distribute ordinary bash commands over many systems☆161Updated 2 years ago
- A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.☆122Updated 6 months ago
- Archive of Potential Insider Threats☆142Updated last year
- AWS, Azure, Alibaba and Google bucket scanner☆142Updated last year
- this script will help you find favicon hashes which you can use to shodan to get more details about an asset☆28Updated 11 months ago
- Discover new target domains using Content Security Policy☆390Updated this week
- Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.☆201Updated this week
- Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.☆173Updated last year
- a smart DNS response-guided subdomain fuzzer☆149Updated 2 years ago
- Target practice for ffuf☆60Updated 3 years ago
- A wordlist that is kept up to date with the latest headlines to provide relevant words to human society☆119Updated 2 years ago
- a simple discovery script that uses popular tools like subfinder, amass, puredns, alterx, massdns and others☆76Updated last year
- Get related domains / subdomains by looking at Google Analytics IDs☆242Updated 2 years ago
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆167Updated 8 months ago
- Discover hidden debugging parameters and uncover web application secrets☆234Updated last year
- Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.☆255Updated 4 months ago
- A Tool for Domain Flyovers☆96Updated last month
- 🔭 Collection of regexp pattern for security passive scanning☆115Updated last year