Loading repository data…
gwen001 / repository
A collection of custom security tools for quick needs.
A transparent discovery signal based on current public GitHub metadata.
This score does not audit code, security, maintainers, documentation quality, or suitability. Verify the repository and its current documentation before adoption.
‼ A big clean occured in 2022-11 ‼
Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them:
git clone https://github.com/gwen001/pentest-tools
cd pentest-tools
pip3 install -r requirements.txt
Converts IP address in arpa format to classical format.
Performs host command on a given hosts list using parallel to make it fast.
Performs a string search on codeshare.io.
Test CORS issue on a given list of hosts.
Test CRLF issue on a given list of hosts.
Grabs subdomains of a given domain from crt.sh.
Tests if ports 3389 and 5900 are open on a given IP range using netcat.
Performs brute force through wordlist to find subdomains.
Performs brute force through numeric variation to find subdomains.
Apply reverse DNS method on a given IP range to find subdomains.
Same thing but IP ranges are read from an input file.
Tests Zone Transfer of a given domain.
Performs all types of DNS requests for a given (sub)domain.
Extracts domain of a given URL or a list of URLs.
Extracts links from a given HTML file.
Classifies and displays URLs by vulnerability types.
Performs regexps listed in flash-regexp.txt for Flash apps testing purpose.
Generates Google dorks for a given domain (searches are not performed).
Uses about 40 algorithms to hash a given string.
Converts a given IP address to different format, see Nicolas Grégoire presentation.
Generates a list of IPs addresses from the given start to the given end, range and mask supported.
Mass test zone transfer on a given list of domains.
Performs SMTP user enumeration on a given list of IP address using smtp-user-enum.
Tests if SMTP user enumeration is possible on a given list of IP address using smtp-user-enum.
Just few common Bash functions.
Encode/Decode UUID using base36.
Test Nagios Remote Plugin Executor Arbitrary Command Execution on a given host using Metasploit.
Test Open Redirect issue on a given list of hosts.
Creates words permutation with different separators and output the hashes using about 40 algorithms.
Performs a string search on pastebin.com.
See xss.py.
Determines what IPs are alive in a given range of IPs addresses using netcat.
Determines what IPs are alive in a given range of IPs addresses using nmap.
Determines what IPs are alive in a given range of IPs addresses using ping.
Determines the open ports of a given IP address using netcat.
Tests a given list of path on a given list of hosts.
Same but the Python version. Tests a given list of path on a given list of hosts.
Test RCE issue on a given list of hosts.
Resolves a give list of hosts to check which ones are alive and which ones are dead.
Takes screenshots of a given url+port using xvfb.
Performs searches on Shodan using their API.
Test HTTP request smuggling issue on a given list of hosts.
Perform very small tests of a given IP address.
Tries to guess SSH users using timing attack.
Generate random IP address:port inside private network range for SSRF scans.
Generates subdomains alterations and permutations.
Brute force a wordlist on IPs range and ports list.
Tries to determine if an url (subdomain+port) is a web thing.
Performs fuzzing on a given IP address+port using netcat.
Just few common PHP functions.
Perform brute force on a given url that use WebDav using Davtest.
Test XSS issue on a given list of hosts using phantomjs.
Feel free to open an issue if you have any problem with the script.
Selected from shared topics, language and repository description—not editorial ratings.
kongali1720 /
🔥 Security Automation Scripts** is an open-source collection of Python, Bash, and PowerShell scripts designed to automate common cybersecurity tasks for Blue Team operations, SOC analysts, system administrators, and security enthusiasts. This repository focuses on defensive security, security monitoring, incident response, and system auditing.
65/100 healthpoisonx-1 /
A collection of Bash and Python scripts for performing network enumeration and vulnerability scanning on Android via Termux. Includes automated Nmap configurations for service version detection and security auditing.
42/100 healthVibhorGupta2288 /
A collection of Bash shell scripts for Linux system administration, auditing, and network analysis, built using free and open-source tools on Ubuntu - primarily Python for scripting and automation, and Git for version control and collaboration via GitHub.