blitzstrike 1.0.20 → 1.0.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +232 -38
- package/manuals/active-directory/certipy.md +36 -0
- package/manuals/blue-team/clamav.md +34 -0
- package/manuals/blue-team/hayabusa.md +39 -0
- package/manuals/blue-team/osquery.md +28 -0
- package/manuals/blue-team/sigma.md +35 -0
- package/manuals/blue-team/snort.md +40 -0
- package/manuals/blue-team/suricata.md +40 -0
- package/manuals/blue-team/velociraptor.md +28 -0
- package/manuals/blue-team/wazuh.md +28 -0
- package/manuals/blue-team/zeek.md +39 -0
- package/manuals/cloud-native/cloudfox.md +35 -0
- package/manuals/crypto/ciphey.md +34 -0
- package/manuals/crypto/rsactftool.md +35 -0
- package/manuals/exploitation/gopherus.md +28 -0
- package/manuals/exploitation/nosqlmap.md +34 -0
- package/manuals/exploitation/ssrfmap.md +40 -0
- package/manuals/exploitation/ysoserial.md +32 -0
- package/manuals/forensics/autopsy.md +28 -0
- package/manuals/forensics/bulk_extractor.md +34 -0
- package/manuals/forensics/oletools.md +28 -0
- package/manuals/forensics/volatility3.md +35 -0
- package/manuals/forensics/zsteg.md +34 -0
- package/manuals/information-gathering/gau.md +38 -0
- package/manuals/information-gathering/holehe.md +28 -0
- package/manuals/information-gathering/rustscan.md +35 -0
- package/manuals/information-gathering/testssl.md +34 -0
- package/manuals/information-gathering/theharvester.md +36 -0
- package/manuals/information-gathering/waybackurls.md +32 -0
- package/manuals/mobile/androguard.md +28 -0
- package/manuals/mobile/apkleaks.md +35 -0
- package/manuals/mobile/mobsf.md +32 -0
- package/manuals/post-exploitation/pwncat-cs.md +28 -0
- package/manuals/red-team/evilginx3.md +34 -0
- package/manuals/reverse-engineering/angr.md +28 -0
- package/manuals/reverse-engineering/cutter.md +32 -0
- package/manuals/reverse-engineering/gdb.md +38 -0
- package/manuals/reverse-engineering/ghidra.md +32 -0
- package/manuals/reverse-engineering/ltrace.md +28 -0
- package/manuals/reverse-engineering/pwndbg.md +32 -0
- package/manuals/reverse-engineering/rizin.md +38 -0
- package/manuals/reverse-engineering/strace.md +34 -0
- package/manuals/utility/anew.md +28 -0
- package/manuals/utility/curl.md +37 -0
- package/manuals/utility/jq.md +34 -0
- package/manuals/utility/notify.md +34 -0
- package/manuals/web/droopescan.md +35 -0
- package/manuals/wireless/hcxdumptool.md +35 -0
- package/package.json +1 -1
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# cloudfox
|
|
2
|
+
|
|
3
|
+
- **Category**: Cloud Security
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Cloud attack path finder. Focus areas: cloud, attack-path.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: download from github releases
|
|
16
|
+
# darwin: manual
|
|
17
|
+
# win32: manual
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
cloudfox -aws <aws>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `aws` | Provider (required) |
|
|
31
|
+
| `-p` | Profile |
|
|
32
|
+
|
|
33
|
+
## Tags
|
|
34
|
+
|
|
35
|
+
cloud, attack-path
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
# ciphey
|
|
2
|
+
|
|
3
|
+
- **Category**: Cryptography
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Cipher/encoding auto-decode. Focus areas: cipher, decode, ctf.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages ciphey
|
|
16
|
+
# darwin: pip install --break-system-packages ciphey
|
|
17
|
+
# win32: pip install --break-system-packages ciphey
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
ciphey -t <t>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-t` | Ciphertext (required) |
|
|
31
|
+
|
|
32
|
+
## Tags
|
|
33
|
+
|
|
34
|
+
cipher, decode, ctf
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# rsactftool
|
|
2
|
+
|
|
3
|
+
- **Category**: Cryptography
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
RSA attack toolkit. Focus areas: rsa, crypto, ctf.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: git clone https://github.com/RsaCtfTool/RsaCtfTool && pip install -r requirements.txt
|
|
16
|
+
# darwin: manual
|
|
17
|
+
# win32: manual
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
RsaCtfTool -h
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `--publickey` | Public key |
|
|
31
|
+
| `--attack` | Attack type |
|
|
32
|
+
|
|
33
|
+
## Tags
|
|
34
|
+
|
|
35
|
+
rsa, crypto, ctf
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# gopherus
|
|
2
|
+
|
|
3
|
+
- **Category**: Exploitation
|
|
4
|
+
- **Risk Level**: 🔴 High
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Gopher SSRF payloads. Focus areas: ssrf, gopher, payload.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: git clone https://github.com/tarunkant/Gopherus && cd Gopherus && pip install -r requirements.txt
|
|
16
|
+
# darwin: manual
|
|
17
|
+
# win32: manual
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
gopherus - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
ssrf, gopher, payload
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
# nosqlmap
|
|
2
|
+
|
|
3
|
+
- **Category**: Exploitation
|
|
4
|
+
- **Risk Level**: 🔴 High
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
NoSQL injection. Focus areas: nosql, injection.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages nosqlmap
|
|
16
|
+
# darwin: pip install --break-system-packages nosqlmap
|
|
17
|
+
# win32: pip install --break-system-packages nosqlmap
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
nosqlmap -u <u>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-u` | URL (required) |
|
|
31
|
+
|
|
32
|
+
## Tags
|
|
33
|
+
|
|
34
|
+
nosql, injection
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
# ssrfmap
|
|
2
|
+
|
|
3
|
+
- **Category**: Exploitation
|
|
4
|
+
- **Risk Level**: 🔴 High
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
SSRF exploitation. Focus areas: ssrf, exploit. Alternatives: gopherus.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: git clone https://github.com/swisskyrepo/SSRFmap && cd SSRFmap && pip install -r requirements.txt
|
|
16
|
+
# darwin: manual
|
|
17
|
+
# win32: manual
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
ssrfmap -r <r>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-r` | Request file (required) |
|
|
31
|
+
| `-p` | Param |
|
|
32
|
+
| `-m` | Module |
|
|
33
|
+
|
|
34
|
+
## Tags
|
|
35
|
+
|
|
36
|
+
ssrf, exploit
|
|
37
|
+
|
|
38
|
+
## Alternatives
|
|
39
|
+
|
|
40
|
+
gopherus
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
# ysoserial
|
|
2
|
+
|
|
3
|
+
- **Category**: Exploitation
|
|
4
|
+
- **Risk Level**: 🔴 High
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Java deserialization payloads. Focus areas: deserialization, java. Alternatives: phpggc.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: download jar from github
|
|
16
|
+
# darwin: brew install ysoserial
|
|
17
|
+
# win32: download jar from github
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
ysoserial - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
deserialization, java
|
|
29
|
+
|
|
30
|
+
## Alternatives
|
|
31
|
+
|
|
32
|
+
phpggc
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# autopsy
|
|
2
|
+
|
|
3
|
+
- **Category**: Forensics
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Digital forensics platform. Focus areas: forensics, dfir, gui.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: download from sleuthkit.org
|
|
16
|
+
# darwin: brew install --cask autopsy
|
|
17
|
+
# win32: choco install autopsy
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
autopsy -h
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
forensics, dfir, gui
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
# bulk_extractor
|
|
2
|
+
|
|
3
|
+
- **Category**: Forensics
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Extract emails/URLs/creds. Focus areas: carving, forensics, email.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: apt install -y bulk-extractor
|
|
16
|
+
# darwin: brew install bulk_extractor
|
|
17
|
+
# win32: manual
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
bulk_extractor -o <o> - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-o` | Output dir (required) |
|
|
31
|
+
|
|
32
|
+
## Tags
|
|
33
|
+
|
|
34
|
+
carving, forensics, email
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# oletools
|
|
2
|
+
|
|
3
|
+
- **Category**: Forensics
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Office malicious doc analysis. Focus areas: malware, office, macro.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages oletools
|
|
16
|
+
# darwin: pip install --break-system-packages oletools
|
|
17
|
+
# win32: pip install --break-system-packages oletools
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
olevba - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
malware, office, macro
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# volatility3
|
|
2
|
+
|
|
3
|
+
- **Category**: Forensics
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Memory forensics. Focus areas: memory, forensics, dfir.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages volatility3
|
|
16
|
+
# darwin: pip install --break-system-packages volatility3
|
|
17
|
+
# win32: pip install --break-system-packages volatility3
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
vol -f <f>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-f` | Memory dump (required) |
|
|
31
|
+
| `windows.pslist` | Plugin |
|
|
32
|
+
|
|
33
|
+
## Tags
|
|
34
|
+
|
|
35
|
+
memory, forensics, dfir
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
# zsteg
|
|
2
|
+
|
|
3
|
+
- **Category**: Forensics
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
PNG/BMP stego detection. Focus areas: stego, png, forensics.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: gem install zsteg
|
|
16
|
+
# darwin: brew install zsteg
|
|
17
|
+
# win32: gem install zsteg
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
zsteg - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-a` | All methods |
|
|
31
|
+
|
|
32
|
+
## Tags
|
|
33
|
+
|
|
34
|
+
stego, png, forensics
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
# gau
|
|
2
|
+
|
|
3
|
+
- **Category**: Information Gathering / Reconnaissance
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Get all URLs (Wayback+OTX+CommonCrawl). Focus areas: url, archive.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: go install github.com/lc/gau/v2/cmd/gau@latest
|
|
16
|
+
# darwin: brew install gau
|
|
17
|
+
# win32: go install github.com/lc/gau/v2/cmd/gau@latest
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
gau - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `--subs` | Include subdomains |
|
|
31
|
+
|
|
32
|
+
## Tags
|
|
33
|
+
|
|
34
|
+
url, archive
|
|
35
|
+
|
|
36
|
+
## Pipeline
|
|
37
|
+
|
|
38
|
+
Pipes well into: anew
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# holehe
|
|
2
|
+
|
|
3
|
+
- **Category**: Information Gathering / Reconnaissance
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Email registration check. Focus areas: email, osint.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages holehe
|
|
16
|
+
# darwin: pip install --break-system-packages holehe
|
|
17
|
+
# win32: pip install --break-system-packages holehe
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
holehe - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
email, osint
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# rustscan
|
|
2
|
+
|
|
3
|
+
- **Category**: Information Gathering / Reconnaissance
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Fast port scanner + nmap. Focus areas: port, scan, fast.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: cargo install rustscan
|
|
16
|
+
# darwin: brew install rustscan
|
|
17
|
+
# win32: cargo install rustscan
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
rustscan -a <a>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-a` | Target (required) |
|
|
31
|
+
| `--range` | Port range |
|
|
32
|
+
|
|
33
|
+
## Tags
|
|
34
|
+
|
|
35
|
+
port, scan, fast
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
# testssl
|
|
2
|
+
|
|
3
|
+
- **Category**: Enumeration
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
TLS/SSL scanner. Focus areas: tls, ssl, crypto.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: git clone https://github.com/drwetter/testssl.sh
|
|
16
|
+
# darwin: brew install testssl
|
|
17
|
+
# win32: manual
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
testssl - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-p` | Protocols |
|
|
31
|
+
|
|
32
|
+
## Tags
|
|
33
|
+
|
|
34
|
+
tls, ssl, crypto
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
# theHarvester
|
|
2
|
+
|
|
3
|
+
- **Category**: Information Gathering / Reconnaissance
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Email/domain/subdomain OSINT. Focus areas: email, osint, domain.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages theHarvester
|
|
16
|
+
# darwin: brew install theharvester
|
|
17
|
+
# win32: pip install --break-system-packages theHarvester
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
theHarvester -d <d>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-d` | Domain (required) |
|
|
31
|
+
| `-b` | Source |
|
|
32
|
+
| `-l` | Limit |
|
|
33
|
+
|
|
34
|
+
## Tags
|
|
35
|
+
|
|
36
|
+
email, osint, domain
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
# waybackurls
|
|
2
|
+
|
|
3
|
+
- **Category**: Information Gathering / Reconnaissance
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
URLs from Wayback Machine. Focus areas: url, archive, osint.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: go install github.com/tomnomnom/waybackurls@latest
|
|
16
|
+
# darwin: brew install waybackurls
|
|
17
|
+
# win32: go install github.com/tomnomnom/waybackurls@latest
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
waybackurls - <>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
url, archive, osint
|
|
29
|
+
|
|
30
|
+
## Pipeline
|
|
31
|
+
|
|
32
|
+
Pipes well into: anew, httpx
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# androguard
|
|
2
|
+
|
|
3
|
+
- **Category**: Mobile Security
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Android static analysis. Focus areas: android, static, analysis.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages androguard
|
|
16
|
+
# darwin: pip install --break-system-packages androguard
|
|
17
|
+
# win32: pip install --break-system-packages androguard
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
androguard -h
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
android, static, analysis
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# apkleaks
|
|
2
|
+
|
|
3
|
+
- **Category**: Mobile Security
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
APK secrets + endpoints. Focus areas: apk, secrets, endpoint.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: pip install --break-system-packages apkleaks
|
|
16
|
+
# darwin: pip install --break-system-packages apkleaks
|
|
17
|
+
# win32: pip install --break-system-packages apkleaks
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
apkleaks -f <f>
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Parameter Reference
|
|
27
|
+
|
|
28
|
+
| Parameter | Description |
|
|
29
|
+
|------|------|
|
|
30
|
+
| `-f` | APK (required) |
|
|
31
|
+
| `-o` | Output |
|
|
32
|
+
|
|
33
|
+
## Tags
|
|
34
|
+
|
|
35
|
+
apk, secrets, endpoint
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
# mobsf
|
|
2
|
+
|
|
3
|
+
- **Category**: Mobile Security
|
|
4
|
+
- **Risk Level**: 🟠 Medium
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## Description
|
|
9
|
+
|
|
10
|
+
Mobile app security framework. Focus areas: android, ios, static. Alternatives: apkleaks.
|
|
11
|
+
|
|
12
|
+
## Installation
|
|
13
|
+
|
|
14
|
+
```bash
|
|
15
|
+
# linux: docker pull opensecurity/mobile-security-framework-mobsf
|
|
16
|
+
# darwin: manual
|
|
17
|
+
# win32: manual
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
## Usage
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
mobsf -h
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Tags
|
|
27
|
+
|
|
28
|
+
android, ios, static
|
|
29
|
+
|
|
30
|
+
## Alternatives
|
|
31
|
+
|
|
32
|
+
apkleaks
|