Plugins & Tools

xer0dayz edited this page 2021-01-11 10:38:44 -07:00

Table of Contents

• Recon/Sub-domain Enumeration
• S3 Buckets
• Sub-domain Takeovers
• Screenshots
• OSINT
• Scanning
• Vuln Scans
• Exploitation
• Brute Force
• Web Application Scanners
• SSL/TLS
• Notifications

Sn1per currently uses the following tools and plugins:

Recon/Sub-domain Enumeration

• Massdns
• Sublist3r
• AMass
• Subfinder
• Dnscan
• crt.sh
• Censys
• Project Sonar
• AltDNS
• DNSGen
• Spoofcheck.py
• Hunter.io

S3 Buckets

• Slurp

Sub-domain Takeovers

• Subover
• Subjack

Screenshots

• Webscreenshot.py
• CutyCapt

OSINT

• theHarvester
• GooHak (https://github.com/1N3/Goohak)
• Whois
• Metagoofil
• Inurlbr
• Waybackmachine

Scanning

• NMap
• AMap
• SSH-audit

Vuln Scans

• OpenVAS
• Yasuo
• NMap Vulners Script

Exploitation

• Metasploit
• NMap Scripts
• Jexboss
• Findsploit (https://github.com/1N3/Findsploit)

Brute Force

• Hydra
• BruteX (https://github.com/1N3/BruteX)

Web Application Scanners

• BlackWidow (https://github.com/1N3/BlackWidow)
• WPScan
• Burpsuite
• Arachni
• Dirsearch
• Gobuster
• wafw00f
• WhatWeb
• WIG
• WebTech
• Nikto
• Clusterd
• CMSMap
• Shocker

SSL/TLS

• SSLScan
• SSLyze
• MassBleed (https://github.com/1N3/MassBleed)

Notifications

• Slack API

Copyright (c) Sn1perSecurity - https://sn1persecurity.com