OFFENSIVE SECURITY CHEATSHEET

— Open Source Intelligence (OSINT)
— Web Pentest
— Network
— Shells methods
— Windows Systems
— Linux Systems
— Other Systems
— Passcracking Hash & Files
— Phishing, RedTeam and SE
— Wireless
— Cryptography
— Pwn
— External Resources

https://cheatsheet.haax.fr/

#cheatsheet #pentest #osint #ad

TIGMINT - OSINT GUI software framework

https://github.com/TIGMINT/TIGMINT

#social #media #Intelligence #OSINT #TwitterAnalyser

GitHub Dorks

https://shahjerry33.medium.com/github-recon-its-really-deep-6553d6dfbb1f

#bugbounty #OSINT #dorks #github

Shodan Dorks

https://raw.githubusercontent.com/Dheerajmadhukar/karma_v2/main/img/shodan_osint_manual_recon.txt

#bugbounty #osint #recon #shodan #dorks #bugbountytips

AsINT Collection

https://start.me/p/b5Aow7/asint_collection

#OSINT #Recon

Karma v2

Passive Open Source Intelligence Automated Reconnaissance Framework

https://github.com/Dheerajmadhukar/karma_v2

#osint #recon

Information Gathering and Scanning for Sensitive Information

https://0xjoyghosh.medium.com/information-gathering-scanning-for-sensitive-information-reloaded-6ff3455e0d4e

#OSINT #Recon

OffSec/OSINT Resources

http://Urlscan.io
http://Hunter.io
http://snov.io
http://Osint.link
http://DNSdumpster.com
http://osintframework.com
http://shodan.io
http://censys.io
http://zoomeye.org
http://opencorporates.com
http://kitploit.com
http://ipv4info.com
http://robtex.com
http://securitytrails.com
http://intelx.io
http://crt.sh
http://spyse.com

#offsec #osint

Osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Features
— Subdomain Scan.
— Subdomain TakeOver Scan.
— Screenshot the target.
— Basic recon like Whois, Dig info.
— Web Technology detection.
— IP Discovery.
— CORS Scan.
— SSL Scan.
— Wayback Machine Discovery.
— URL Discovery.
— Headers Scan.
— Port Scan.
— Vulnerable Scan.
— Seperate workspaces to store all scan output and details logging.
— REST API.
— React Web UI.
— Support Continuous Scan.
— Slack notifications.
— Easily view report from commnad line.

https://github.com/j3ssie/Osmedeus

#osint #vulnerability #scanner #bugbounty

VPN Overall Reconnaissance, Testing, Enumeration and Exploitation Toolkit (Vortex)

A very simple Python framework, inspired by SprayingToolkit, that tries to automate most of the process required to detect, enumerate and attack common O365 and VPN endpoints (like Cisco, Citrix, Fortinet, Pulse, etc...).

Features:
— User Search and Collection
— Password Leaks
— Main Domain Identification
— Subdomain Search
— VPN Endpoint Detection
— Password Spraying/Guessing attacks
— Search profiles on Social Networks

https://github.com/klezVirus/vortex

#osint #vpn #enumeration #spraying #tools