bruter
aquatone
| bruter | aquatone | |
|---|---|---|
| 4 | 4 | |
| 34 | 4,974 | |
| - | - | |
| 8.1 | 0.0 | |
| 2 months ago | almost 2 years ago | |
| Go | Go | |
| GNU General Public License v3.0 only | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bruter
-
https://github.com/CyberRoute/bruter
- https://github.com/CyberRoute/bruter
-
Bruter v1.1.0-Beta
Howdy folks!!!
I release bruter v1.1.0-beta
Bruter is a simple app that was built as an experiment while learning Go. The tooling can be used to test webservers and validate webservers configurations, but not just!
What does it do?
It grabs HostInfo data from Shodan APIs, so you will need a Token to try this out
It collects banners for various services FTP, SSH, MYSQL, IRC, SMTP
It collects HTTP headers
It brute force directories on WebServers and reports results (200)
It provides info from crt.sh about SSL certificates
It supports custom wordlists
It produces a Web UI for presentation
Any feedback and/or contribution would be greatly appreciated :)
- https://github.com/CyberRoute/bruter
- Bruter v1.0.0b
aquatone
-
Any tips on efficiently evaluating a huge list of subdomains for a PenTest?
How about aquatone? https://github.com/michenriksen/aquatone
-
Mapping your AWS attack surface
Empowered with a list of all the exposed URLs in your organization, you can then set up a process to scan these using a number of web-focused Dynamic Application Security Testing (DAST) tools and scanners such as Zed Attack Proxy, dirsearch (Web path scanner), Aquatone, and Nikto2. The OWASP® Foundation maintains a full list of scanning tools that could be used.
-
Awesome Penetration Testing
AQUATONE - Subdomain discovery tool utilizing various open sources producing a report that can be used as input to other tools.
- Which is better choice for taking screenshots on large networks Aquatone or eyewitness ?
What are some alternatives?
goblob - A fast enumeration tool for publicly exposed Azure Storage blobs.
gowitness - 🔍 gowitness - a golang, web screenshot utility using Chrome Headless
cariddi - Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Metasploit - Metasploit Framework
cfuzz - Command line fuzzer and bruteforcer 🌪 wfuzz for command
rattlesnakeos-stack - Build your own privacy and security focused Android OS in the cloud.
osmedeus - A Workflow Engine for Offensive Security
RustScan - 🤖 The Modern Port Scanner 🤖
xray - XRay is a tool for recon, mapping and OSINT gathering from public networks.
chrome-session-dump - A program for extracting information from chrome session files.
dorkscout - DorkScout - Golang tool to automate google dork scan against the entiere internet or specific targets
fast - Check your internet speed/bandwidth right from your terminal. Built on Golang using chromedp