diff --git a/.gitmodules b/.gitmodules index 757d317b..a6617fad 100644 --- a/.gitmodules +++ b/.gitmodules @@ -2662,3 +2662,6 @@ [submodule "Code Auditing/Static Analysis/sbom-tools"] path = Code Auditing/Static Analysis/sbom-tools url = https://github.com/sbom-tool/sbom-tools.git +[submodule "Penetration Testing/Info Gathering/leaker"] + path = Penetration Testing/Info Gathering/leaker + url = https://github.com/vflame6/leaker.git diff --git a/Penetration Testing/Info Gathering/leaker b/Penetration Testing/Info Gathering/leaker new file mode 160000 index 00000000..7b8d7b33 --- /dev/null +++ b/Penetration Testing/Info Gathering/leaker @@ -0,0 +1 @@ +Subproject commit 7b8d7b33d8a0395b3ac8ba3b92aed073b24a1d2d diff --git a/_pages/index.rst b/_pages/index.rst index 5353625c..0893734b 100644 --- a/_pages/index.rst +++ b/_pages/index.rst @@ -688,6 +688,7 @@ Info Gathering - `HostHunter `_ - A tool to efficiently discover and extract hostnames providing a large set of target IP addresses. HostHunter utilises simple OSINT techniques to map IP addresses with virtual hostnames. It generates a CSV or TXT file containing the results of the reconnaissance. - `IVRE `_ - An open-source framework for network recon. It relies on open-source well-known tools to gather data (network intelligence), stores it in a database, and provides tools to analyze it. - `Knock `_ - A python tool designed to enumerate subdomains on a target domain through a wordlist. +- `Leaker ` - Passive leak enumeration CLI tool that searches across 10 breach databases simultaneously. - `Log4jscanlinux `_ - This shell script intends to collect necessary details and help detect CVE-2021-44228 and CVE-2021-45046 vulnerabilities reported in Log4j. - `Log4jscanwin `_ - The Log4jScanner.exe utility helps to detect CVE-2021-44228 and CVE-2021-45046 vulnerabilities. The utility will scan the entire hard drive(s) including archives (and nested JARs) for the Java class that indicates the Java application contains a vulnerable log4j library. The utility will output its results to a console. - `Operative-framework `_ - This is a framework based on fingerprint action, this tool is used for get information on a website or a enterprise target with multiple modules (Viadeo search,Linkedin search, Reverse email whois, Reverse ip whois, SQL file forensics ...). @@ -863,7 +864,7 @@ Reporting - `DefectDojo `_ - An open-source application vulnerability correlation and security orchestration tool. - `Dradis `_ - Colllaboration and reporting for IT Security teams. - `Faraday `_ - Collaborative Penetration Test and Vulnerability Management Platform. -- `PwnDoc `_ - A pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. +- `PwnDoc `_ - A pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. - `VECTR `_ - A tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. - `WriteHat `_ - A reporting tool which removes Microsoft Word (and many hours of suffering) from the reporting process. Markdown --> HTML --> PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. @@ -1146,7 +1147,7 @@ Cloud Security - `Security Monkey `_ - Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time. - `SyntheticSun `_ - A defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats. - `ThreatMapper `_ - Hunts for threats in your production platforms, and ranks these threats based on their risk-of-exploit. It uncovers vulnerable software components, exposed secrets and deviations from good security practice. -- `Varna `_ - Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL) +- `Varna `_ - Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL) Resources - `s3cr3t `_ - Serve files securely from an S3 bucket with expiring links and other restrictions.