m0rtem / CloudFail
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
☆2,268Updated 9 months ago
Alternatives and similar repositories for CloudFail:
Users that are interested in CloudFail are comparing it to the libraries listed below
- 🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.☆2,654Updated 7 months ago
- Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies fo…☆1,210Updated 2 years ago
- File upload vulnerability scanner and exploitation tool.☆3,154Updated last year
- A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)☆3,220Updated 3 weeks ago
- Generates permutations, alterations and mutations of subdomains and then resolves them☆2,358Updated last week
- Knock Subdomain Scan☆3,915Updated 2 months ago
- A Tool for Domain Flyovers☆5,694Updated 2 years ago
- HTTP parameter discovery suite.☆5,376Updated last month
- DNS Enumeration Script☆2,689Updated this week
- EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.☆5,106Updated 2 months ago
- A python script that finds endpoints in JavaScript files☆3,789Updated 9 months ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆2,069Updated this week
- A curated list of amazingly awesome Burp Extensions☆3,040Updated 2 months ago
- Automated NoSQL database enumeration and web application exploitation tool.☆2,980Updated 5 months ago
- Find web directories without bruteforce☆1,788Updated last year
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆1,730Updated 2 years ago
- Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications…☆1,239Updated 4 months ago
- Abusing Certificate Transparency logs for getting HTTPS websites subdomains.☆1,987Updated last year
- WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.☆5,450Updated 2 weeks ago
- Detect and bypass web application firewalls and protection systems☆2,704Updated 5 months ago
- The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, su…☆3,376Updated 11 months ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆4,106Updated 2 weeks ago
- Advanced vulnerability scanning with Nmap NSE☆3,522Updated 4 months ago
- A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.☆1,560Updated last month
- Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hu…☆2,040Updated 6 months ago
- A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…☆3,711Updated 3 years ago
- Striker is an offensive information and vulnerability scanner.☆2,243Updated last year
- A DNS meta-query spider that enumerates DNS records, and subdomains.☆3,377Updated 3 years ago
- Weaponized web shell☆3,234Updated 3 months ago
- Fetch all the URLs that the Wayback Machine knows about for a domain☆3,639Updated 8 months ago