Top 23 Enumeration Open-Source Projects

• PayloadsAllTheThings

  34 56,681 8.6 Python

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Project mention: php shell not executed in wordpress | /r/hacking | 2023-12-08

Also https://github.com/swisskyrepo/PayloadsAllTheThings I'm sure there's a few test php files in here for filter bypasses too

• PEASS-ng

  90 14,831 8.5 C#

  PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

  

Project mention: Great enumeration scripts? | /r/oscp | 2023-06-02

Once on a system, something like Linpeas or Winpeas would be useful: https://github.com/carlospolop/PEASS-ng

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• dirsearch

  12 11,213 7.9 Python

  Web path scanner

Project mention: Looking for some help with this Python package | /r/learnpython | 2023-08-19

I am new to Python. With the help of several users (thanks u/Diapolo10 and u/shiftybyte)I've been able to install Python and the dirsearch package. Dirsearch (https://github.com/maurosoria/dirsearch) allows for checking website paths with a wordlist. For example, I have a wordlist file with words like "dog", "cat", "bird", etc and I want to check the validity of those words as extensions on a website. Something like "example.com/bird", "example.com/cat", etc. I have a test wordlist in the same directory as dirsearch, but I am confused on how to proceed with the commands. I want to have it check my wordlist as extensions on the example.com website and then save output on if the webpath is valid or not. Just need a little bit of help.

• amass

  19 11,158 7.5 Go

  In-depth attack surface mapping and asset discovery

  

Project mention: amass VS dmut - a user suggested alternative | libhunt.com/r/amass | 2023-11-29

• feroxbuster

  12 5,250 8.2 Rust

  A fast, simple, recursive content discovery tool written in Rust.

Project mention: gobuster or dirbuster or dirb | /r/hacking | 2023-06-07

Ferox https://github.com/epi052/feroxbuster

• RedTeam-Tools

  2 5,144 5.8

  Tools and Techniques for Red Team / Penetration Testing

• Active-Directory-Exploitation-Cheat-Sheet

  2 4,996 4.1

  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• pspy

  8 4,510 0.0 Go

  Monitor linux processes without root permissions

Project mention: Ask HN: What's the big deal with Go (Golang)? | news.ycombinator.com | 2023-10-12

* https://github.com/DominicBreuker/pspy

When you deploy them they just work. Compare that to compiled C++ code you often face issues with the deployment in my experience. And production machines usually do not ship compilers.

• discover

  3 3,309 8.2 PowerShell

  Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

Project mention: Do you know a Kali tool to find an username with just the name of the person ? | /r/Kalilinux | 2023-07-03

https://github.com/leebaird/discover try this

• Raccoon

  4 2,993 0.0 Python

  A high performance offensive security tool for reconnaissance and vulnerability scanning

• pwncat

  3 2,349 0.0 Python

  Fancy reverse and bind shell handler

Project mention: Take the first steps to harden your Kubernetes cluster | dev.to | 2023-09-09

We're using pwncat-cs to listen for incoming connections and elevate to a shell. Log into the EC2 VM and run:

• ksubdomain

  1 2,086 0.0 Go

  无状态子域名爆破工具

  

• Reconnoitre

  2 2,065 0.0 Python

  A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

• laravel-enum

  3 1,965 6.9 PHP

  Simple, extensible and powerful enumeration implementation for Laravel.

Project mention: How to Use Laravel Rules | dev.to | 2023-07-27

Suppose we have a Permission enum in our Laravel project, and when an admin assigns a permission to a user, we need to verify if the permission is valid. To accomplish this, we'll create the Permission enum using BenSampo/laravel-enum package:

• Sudomy

  3 1,847 2.2 Shell

  Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

• A-Red-Teamer-diaries

  1 1,670 3.1

  RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

• rapidscan

  1 1,649 4.1 Python

  :new: The Multi-Tool Web Vulnerability Scanner.

  

• Interlace

  1 1,168 2.6 Python

  Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

• CrossLinked

  1 1,140 5.6 Python

  LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

• deepce

  1 1,096 5.5 Shell

  Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Project mention: How to Escape a Container | news.ycombinator.com | 2023-12-20

Useful: https://github.com/stealthcopter/deepce

• enum4linux-ng

  1 1,020 5.5 Python

  A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

• CEH-in-bullet-points

  24 878 0.0

  💻 Certified ethical hacker summary in bullet points

Project mention: AYUDA / PREGUNTA / Estudiando CEH | /r/CEH | 2023-05-23

• NetFabric.Hyperlinq

  4 858 0.0 C#

  High performance LINQ implementation with minimal heap allocations. Supports enumerables, async enumerables, arrays and Span<T>.

  

Project mention: Classes vs. Structs in .NET. How not to teach about performance | news.ycombinator.com | 2023-11-04

> AVX instructions, which is implemented for quite a few LINQ methods

Are you sure? Any examples of such methods? And does AVX actually helps?

I don’t think that’s possible because IMO AVX and other SIMD can only help for dense inputs. The C# type is ReadOnlySpan, however ReadOnlySpan doesn’t implement IEnumerable and therefore incompatible with LINQ.

There’s even an alternative LINQ to workaround https://github.com/NetFabric/NetFabric.Hyperlinq but that thing is a third-party library most people aren’t using.

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Enumeration related posts

• amass VS dmut - a user suggested alternative
  2 projects | 29 Nov 2023
• In-depth attack surface mapping and asset discovery
  1 project | news.ycombinator.com | 15 Nov 2023
• How to Use Laravel Rules
  1 project | dev.to | 27 Jul 2023
• 10. 使用工具帮你进行开源情报收集
  1 project | /r/primecitizens | 2 Jul 2023
• o365Spray Attack Respond Rule
  1 project | /r/SaaSy_MSP_Community | 13 Jun 2023
• Great enumeration scripts?
  1 project | /r/oscp | 2 Jun 2023
• AYUDA / PREGUNTA / Estudiando CEH
  1 project | /r/CEH | 23 May 2023
• A note from our sponsor - WorkOS
  workos.com | 24 Apr 2024

  The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com