g-solaria / OSINTforPenTests
Slides from my ShellCon Talk, OSINT for Pen Tests, given 10/19.
☆61Updated 7 years ago
Alternatives and similar repositories for OSINTforPenTests:
Users that are interested in OSINTforPenTests are comparing it to the libraries listed below
- WhiteBox CMS analysis☆69Updated last year
- A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.☆66Updated 6 years ago
- Comprehensive Pivoting Framework☆20Updated 8 years ago
- A collection of scripts that I've written while pentesting.☆31Updated 6 years ago
- Tool for checking Whether a domain or its multiple sub-domains are up and running.☆72Updated 6 years ago
- Materials related to the 2017 BSides Las Vegas presentation☆52Updated 4 years ago
- A tool to catch spoofed NBNS responses.☆50Updated 6 years ago
- ☆61Updated 7 years ago
- Spray SMB with hashes, Then psexec☆32Updated 5 years ago
- Simple DDE object detector☆56Updated 7 years ago
- Transform NMap Scans to an D3.js HTML Table☆59Updated 7 years ago
- malicious file maker/sender to create and send malicious attachments to test your email filter/alerting☆69Updated 7 years ago
- Simple IP Information Tools for Reputation Data Analysis☆23Updated 6 years ago
- Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created d…☆67Updated 11 months ago
- PHDAYS |||☆17Updated 11 years ago
- Penetration Testing Tools Developed by AppSec Consulting.☆48Updated 6 years ago
- The initial conversation slides and menu of scenarios☆38Updated 3 years ago
- Fingerprint a web app using local files as the fingerprint sources☆38Updated 7 years ago
- Talk given at DerbyCon and RuxCon 2016☆22Updated 8 years ago
- Subdomain brute force focused on speed and data serialization☆74Updated 2 years ago
- This tool will extract useful information from the McAfee update SiteList file and decrypt the associated password for each entry.☆26Updated 7 years ago
- Some simple and useful tools☆15Updated 6 years ago
- Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability☆10Updated 6 years ago
- Automated enumeration☆30Updated 4 years ago
- A simplified SMB Email Client Attack script used for pentests.☆30Updated 6 years ago
- Speeds up the extraction of password hashes from ntds.dit files. For use with the ntdsxtract project or the dshash script☆27Updated last year
- PoC for an adaptive parallelised DNS prober☆44Updated 7 years ago
- Run PowerShell command without invoking powershell.exe☆12Updated 7 years ago
- Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.☆45Updated 4 years ago
- A SHODAN/Censys + Paramiko scanner to check for backdoored Internet-facing Juniper ScreenOS devices☆63Updated 9 years ago