Forbidden Buster is a tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at yo…
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, “Why do we need another tool that can check if a domain can be spoofed?” Well, Spoofy is different and here is why: Authorita…
xsubfind3r is a command-line interface (CLI) utility to find domain’s known subdomains from curated passive online sources. Features Fetches domains from curated passive sources to maximize results.Supports stdin and stdout for easy integration…
This project was built by pentesters for pentesters.
Redeye is a tool intended to help you manage your data during a pentest operation in the most efficient and organized way.
The Developers
Daniel Arad – @dandan_arad && Elad Pticha – @elad_pt…
xcrawl3r is a command-line interface (CLI) utility to recursively crawl webpages i.e systematically browse webpages’ URLs and follow links to discover linked webpages’ URLs. Features Recursively crawls webpages for URLs. Parses URLs from files (…
xurlfind3r is a command-line interface (CLI) utility to find domain’s known URLs from curated passive online sources. Features Fetches URLs from curated passive sources to maximize results: AlienVault’s OTX BeVigil Common Crawl URLScan Git…
SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an in…
SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an in…
Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy for working as a team. The main idea behind the…
CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. …
