Section: Tools collections/toolkits · Toolkit of 51 modules (for collecting domain/IP information - cookie_brute, wappalyzer, sslcert, leakix, urlscan, wayback (full list in the picture)

ActiveScore 73

sqlmap

Tamper scripts in SQLMap obfuscate payloads which might evade some WAFs.

In 10 listsDetails

mitmproxy

An interactive HTTPS proxy that allows inspection, modification, and debugging of network traffic, useful for video streaming analysis.

In 10 listsDetails

Sherlock

🆓 Hunt down social media accounts by username across social networks.

In 7 listsDetails

Sublist3r

Sublist3r is a multi-threaded sub-domain enumeration tool for penetration testers by @aboul3la.

In 7 listsDetails

commix

Automated All-in-One OS command injection and exploitation tool by @commixproject.

In 7 listsDetails

Amass

The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.

In 7 listsDetails

SpiderFoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

In 7 listsDetails

Bandit

Python Code Quality Authority - Find common security vulnerabilities in Python code.

In 6 listsDetails

bbot

Found in these lists

Often listed next to it