allyomalley/s3Takeover

Stars
26
Rank 925,763 (Top 19 %)
Language
Go
Created over 4 years ago
Updated 4 months ago

allyomalley/s3Takeover

allyomalley

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Automate the process of an S3 bucket subdomain takeover via dangling CNAME record

LiveTargetsFinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

dnsobserver

A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack.

BurpParamFlagger

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

p12Cracker

A simple tool to brute force a password-protected PFX/P12 file

pentest_scripts

Various pentesting scripts, focusing on iOS and network security

p12CrackerGo

A simple Go script to concurrently brute force a password-protected PKCS#12 (PFX/P12) file

MailBot

Tool to automatically email results from your Python scripts to your inbox as text or as a file attachment, storing the sender email account's password securely in the keychain.

collectCertInfo

Collects basic SSL certificate information from a list of targets and stores results in a SQLite database.

VoteTracker

VoteTracker iOS App