enumeration

A fast WordPress plugin enumeration tool

High performance LINQ implementation with minimal heap allocations. Supports enumerables, async enumerables, arrays and Span<T>.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Autonomous Privilege Escalation using AI + Benchmarking models

Work in progress...

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

onedrive user enumeration - pentest tool to enumerate valid o365 users

This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Components.

Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

Enumerate information from NTLM authentication enabled web endpoints 🔎