OSINT Tools

07/05/202221/05/2021 por Juan Espin

Anonimizacion

Bing Hacking

Borrar Identidad

Buscadores

Certificación

Clima/Horario

Criptomonedas

Dark Web

DataLeaks

Datos Bancarios

Distribuciones OSINT

DNI/CIF

Documentos

Emails

Empresa/Profesional

Facebook

Geolocalizar

Google Hacking

Imágenes

Instagram

IPs

Mapas

Marcadores

Marcadores para Facebook3

Monitores

Nicknames

Otras RRSS

Personas

Productividad

Repositorios

Software

Teléfonos

Twitter

Vehículos

Vídeos

Webcams

Webs

Ashok - A OSINT Recon Tool, A.K.A Swiss Army Knife 26/06/2024
Reconnaissance is the first phase of penetration testing which means gathering information before any real attacks are planned So Ashok is an Incredible fast recon tool for penetration tester which is specially designed for Reconnaissance" title="Reconnaissance">Reconnaissance phase. And in Ashok-v1.1 you can find the advanced google dorker and wayback crawling machine. Main Features - Wayback […]
CloudBrute - Awesome Cloud Enumerator 25/06/2024
A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike. The complete writeup is available. here Motivation we are always thinking of something we can automate to make […]
Hfinger - Fingerprinting HTTP Requests 24/06/2024
Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :-) Its main objective is to provide unique representations (fingerprints) of malware requests, which help in their identification. Unique means here that each fingerprint should be seen only in one particular malware family, yet one family can have […]
VulnNodeApp - A Vulnerable Node.Js Application 23/06/2024
A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only. Setup Clone this repository git clone https://github.com/4auvar/VulnNodeApp.git Application setup: Install the latest node.js version with npm. Open terminal/command prompt and navigate to the location of downloaded/cloned repository. Run command: npm install DB setup Install and […]
XMGoat - Composed of XM Cyber terraform templates that help you learn about common Azure security issues 22/06/2024
XM Goat is composed of XM Cyber terraform templates that help you learn about common Azure security issues. Each template is a vulnerable environment, with some significant misconfigurations. Your job is to attack and compromise the environments. Here's what to do for each environment: Run installation and then get started. With the initial user and […]
Extrude - Analyse Binaries For Missing Security Features, Information Disclosure And More... 21/06/2024
Analyse binaries for missing security features, information disclosure and more. Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE (Windows) binaries will be supported soon. Usage Usage: extrude [flags] [file]Flags: -a, --all Show details of all tests, not just those which failed. -w, --fail-on-warning Exit with a […]
BokuLoader - A Proof-Of-Concept Cobalt Strike Reflective Loader Which Aims To Recreate, Integrate, And Enhance Cobalt Strike's Evasion Features! 20/06/2024
A proof-of-concept User-Defined Reflective Loader (UDRL) which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors: Contributor Twitter Notable Contributions Bobby Cooke @0xBoku Project original author and maintainer Santiago Pecin @s4ntiago_p Reflective Loader major enhancements Chris Spehn @ConsciousHacker Aggressor scripting Joshua Magri @passthehashbrwn IAT hooking Dylan Tran @d_tranman Reflective Call Stack Spoofing James […]
Volana - Shell Command Obfuscation To Avoid Detection Systems 19/06/2024
Shell command obfuscation to avoid SIEM/detection system During pentest, an important aspect is to be stealth. For this reason you should clear your tracks after your passage. Nevertheless, many infrastructures log command and send them to a SIEM in a real time making the afterwards cleaning part alone useless.volana provide a simple way to hide […]
CyberChef - The Cyber Swiss Army Knife - A Web App For Encryption, Encoding, Compression And Data Analysis 18/06/2024
CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR and Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression and decompression of data, calculating hashes and checksums, IPv6 and X.509 parsing, changing character […]
NativeDump - Dump Lsass Using Only Native APIs By Hand-Crafting Minidump Files (Without MinidumpWriteDump!) 16/06/2024
NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz (SystemInfo, ModuleList and Memory64List Streams). NTOpenProcessToken and NtAdjustPrivilegeToken to get the "SeDebugPrivilege" privilege RtlGetVersion to get the Operating System version details (Major version, minor version and build […]