enumeration

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Web path scanner

Tools and Techniques for Red Team / Penetration Testing

A fast, simple, recursive content discovery tool written in Rust.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Monitor linux processes without root permissions

A high performance offensive security tool for reconnaissance and vulnerability scanning

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux and Ubuntu.

Automated NoSQL database enumeration and web application exploitation tool.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Simple, extensible and powerful enumeration implementation for Laravel.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

A collection of one-liners for bug bounty hunting.

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Security Tool to Look For Interesting Files in S3 Buckets

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

💻 Certified ethical hacker summary in bullet points

Username enumeration and password spraying tool aimed at Microsoft O365.

Automatic Enumeration Tool based in Open Source tools

Subdomain and target enumeration tool built for offensive security testing