amass
Ciphey
Our great sponsors
| amass | Ciphey | |
|---|---|---|
| 19 | 27 | |
| 11,158 | 16,920 | |
| 2.9% | 7.6% | |
| 7.5 | 2.9 | |
| 6 days ago | 24 days ago | |
| Go | Python | |
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
amass
-
amass VS dmut - a user suggested alternative
2 projects | 29 Nov 2023
-
findomain VS amass - a user suggested alternative
2 projects | 24 Nov 2023
- In-depth attack surface mapping and asset discovery
- 10. 使用工具帮你进行开源情报收集
-
Looking for Recommendations for New Vulnerability & PHI/PII Scanner
OWASP Zap, OWASP Amass, OpenVAS Scanner
-
Can authenticated internet-facing web app be discovered if not indexed by search engines?
My main source is Certificate Transparency, which is kind of a database of TLS certs created so far. But use external tools like Subfinder or Amass.
-
Millions of .git folders exposed publicly by mistake
Scan our domains and infrastructure to reveal if we have exposed.git repositories and other critical infrastructure. You can scan your domains and subdomains with many tools such as Amass or dirsearch to name a couple.
-
Tools for subdomain brute forcing
Amass = https://github.com/OWASP/Amass
- RustScan/RustScan: 🤖 The Modern Port Scanner 🤖
- OWASP/Amass: In-depth Attack Surface Mapping and Asset Discovery
Ciphey
-
CyberChef from GCHQ: The Cyber Swiss Army Knife
I also discovered Ciphey. Neat little tool indeed, but it's being deprecated. It's mentioned in this issue[1] and being replaced with Ares[2]. Neither could decipher this strange encryption[3] I used it on :(
[1] https://github.com/Ciphey/Ciphey/issues/764
[2] https://github.com/bee-san/Ares
[3] "dEFLWWFKQWxRQW16RnkvbTZML0lsdz09" original text is "hacker"
- Ciphey – automated decryption/decoding/cracking tool
-
Email Obfuscation Rendered Almost Ineffective Against ChatGPT
Check Ciphey, I have used several times before and overall it’s great. https://github.com/Ciphey/Ciphey
- How do you identify common encodings?
- This is from the Netflix series Dark. I hope this isnt very hard to decrypt. I would love to see this cipher get decrypted. Also a good way of suggesting to watch this.
-
In CTFs, you'll often get a string of text to decode. Is there a good way to recognize how to decode it?
It can help you detect various encryption and encodings and even decrypt them. Ciphey
-
How do I install Ciphey on Windows 10?
I followed the steps here . I am running Python 3.10 (64). When I try to install Ciphey using the instructions, on my cmd prompt I get the following:
-
How do I get Ciphey to use more cores for decryption?
repo: https://github.com/Ciphey/Ciphey
-
tools for decrypting
if you're looking for something that would decrypt most well-known encodings/ciphers, there's ciphey. but no such thing exists to decrypt every known file type because, if it did, everyone would be using it.
- CyberChef – The Cyber Swiss Army Knife
What are some alternatives?
subfinder - Fast passive subdomain enumeration tool.
CyberChef - The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
assetfinder - Find domains and subdomains related to a given domain
juice-shop - OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
masscan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
CrackMapExec - A swiss army knife for pentesting networks
theHarvester - E-mails, subdomains and names Harvester - OSINT
jwt-cracker - Simple HS256, HS384 & HS512 JWT token brute force cracker.
nuclei - Fast and customizable vulnerability scanner based on simple YAML based DSL.
github-readme-stats - :zap: Dynamically generated stats for your github readmes
spiderfoot - SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
hacktricks - Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.