LeeBrotherston / badflareLinks
OSINT tool for discovering the real IP addresses of services which are behind Cloudflare but not properly locked down
☆144Updated last year
Alternatives and similar repositories for badflare
Users that are interested in badflare are comparing it to the libraries listed below
Sorting:
- Wordlists handcrafted (and automated) with ♥☆218Updated 4 months ago
- AWS, Azure, Alibaba and Google bucket scanner☆154Updated last year
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆348Updated 2 years ago
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆176Updated 6 months ago
- This could have been a bash one-liner but guess what. It's a small Go tool that lists the trending CVEs from cvetrends.com☆106Updated 2 years ago
- Archive of Potential Insider Threats☆147Updated last year
- Scans SPF and DMARC records for issues that could allow email spoofing.☆131Updated 2 years ago
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆128Updated 3 years ago
- Daily alert when a new domain name is registered and contains your keywords☆117Updated last year
- Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.☆182Updated last year
- Monitoring the Cloud Landscape☆84Updated last week
- IP Lookups for Open Ports and Vulnerabilities from internetdb.shodan.io☆130Updated 3 years ago
- Nuclei templates for honeypots detection.☆196Updated last year
- A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the giv…☆94Updated last year
- a simple discovery script that uses popular tools like subfinder, amass, puredns, alterx, massdns and others☆78Updated last year
- a smart DNS response-guided subdomain fuzzer☆152Updated 2 years ago
- WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find ent…☆128Updated 3 years ago
- this script will help you find favicon hashes which you can use to shodan to get more details about an asset☆28Updated 3 months ago
- Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator☆169Updated 3 years ago
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆125Updated last year
- ☆190Updated 2 years ago
- A projectdiscovery driven attack surface monitoring bot powered by axiom☆182Updated 2 years ago
- Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.☆218Updated 3 weeks ago
- A proof of concept email spoofing tool built on Docker.☆128Updated 3 years ago
- ☆119Updated 2 years ago
- MayorSec DNS Enumeration Tool☆87Updated 7 months ago
- Shortemall is a Python-based tool that automates the process of scanning hidden content of Short URLs.☆90Updated last year
- Sample Obsidian's vault for web pentesting☆97Updated 11 months ago
- spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong to a specific organization.☆84Updated last month
- Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces☆162Updated 2 months ago