gwen001/pentest-tools
Custom pentesting tools
| repo name | gwen001/pentest-tools |
| repo link | https://github.com/gwen001/pentest-tools |
| homepage | |
| language | Python |
| size (curr.) | 3708 kB |
| stars (curr.) | 1144 |
| created | 2015-11-02 |
| license | |
pentest-tools
My collection of custom tools I use in my daily.
I don’t believe in license.
You can do whatever you want with this program.
Anyway there is a way to support :)
arpa.sh
A script that will convert address in “arpa” format to classical format.
crtsh.php
A script that grab subdomains of a given domain from https://crt.sh
detect-vnc-rdp.sh
A script that test port of a given IP range with netcat, by default: 3389 and 5900.
dnsenum-brute.sh
A script that perform brute force through wordlist to find subdomains.
dnsenum-bruten.sh
A script that perform brute force through numeric variation to find subdomains.
dnsenum-reverse.sh
A script that apply reverse DNS technic on a given IP range to find subdomains.
dnsenum-reverserange.sh
Same thing but IP ranges are read from an input file.
dnsenum-zonetransfer.sh
A script that test Zone Transfer of a given domain.
extract-endpoints.php
A script that try to extract endpoints from Javascript files, thanks to ZSeano
extract_links.php
A script that try to extract links from a given HTML file.
finddl.sh
???
gdorks.php
A script that simply creates Google dorks for a given domain (the search are not performed).
gg-extract-links.php
???
ip-converter.php
A script that convert a given IP address to different format, thanks to Nicolas Grégoire
ip-listing.php
A script that generates IP address from the start to the end.
mass_axfr.sh
A script that test Zone Transfer on a given list of domains using Fierce.
mass-smtp-user-enum-bruteforce.sh
A script that perform SMTP user enumeration on a given list of IP address using smtp-user-enum
mass-smtp-user-enum-check.sh
A script that simply test if SMTP user enumeration is possible on a given list of IP address using smtp-user-enum
nrpe.sh
A script that test the Nagios Remote Plugin Executor Arbitrary Command Execution using Metasploit.
pass-permut.php
A script that creates words permutation with different separators and output the hashes.
ping-sweep-nc.sh
A script that try to determine what IP are alive in a given range of IP address using Netcat.
ping-sweep-nmap.sh
A script that try to determine what IP are alive in a given range of IP address using Nmap.
ping-sweep-ping.sh
A script that try to determine what IP are alive in a given range of IP address using Ping.
portscan-nc.sh
A script that try to determine the open ports of a given IP address using Netcat.
screensite.sh
A script that take a screenshot of a given url+port using Xvfb.
srv_reco.sh
A script that perform a very small test of a given IP address.
ssh-timing-b4-pass.sh
???
ssrf-generate-ip.php
A script that generate random IP address inside private network range.
subdomains_finder.sh
A script that find subdomains using other well known programs (TheHarvester, DNSrecon…)
subthreat.php
A script that grab subdomains of a given domain from https://www.threatcrowd.org
testhttp.php
A script that test if an url (subdomain+port) is a web thing.
testhttp2.php
Same same but different.
test-ip-wordlist.sh
???
testnc.sh
A script that fuzz a given IP address with Netcat.
wayback-analyzer.php
A script that try to nicely display waybackurls.py output.
webdav-bruteforce.sh
A script that perform brute force on a given url that use WebDav using Davtest
