Pinned Repositories
aiodnsbrute
Python 3.5+ DNS asynchronous brute force utility
Airi
Hidden input parameters finder
airixss
Finding XSS during recon
API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
asnip
ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight
autochrome
This tool downloads, installs, and configures a shiny new copy of Chromium.
bhedak
A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.
broken-link-checker
Find broken links, missing images, etc within your HTML.
bypass-403
A simple script just made for self use for bypassing 403
cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
dusheeno's Repositories
dusheeno/API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
dusheeno/autochrome
This tool downloads, installs, and configures a shiny new copy of Chromium.
dusheeno/broken-link-checker
Find broken links, missing images, etc within your HTML.
dusheeno/bypass-403
A simple script just made for self use for bypassing 403
dusheeno/cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
dusheeno/cloud_enum
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
dusheeno/cowitness
CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an HTTP server and a DNS server, providing complete responses and valuable insights during your testing process.
dusheeno/csprecon
Discover new target domains using Content Security Policy
dusheeno/CVE-2024-24919-Bulk-Scanner
CVE-2024-24919 [Check Point Security Gateway Information Disclosure]
dusheeno/DeauthDetector
Detect deauthentication frames using an ESP8266
dusheeno/fake-sms
A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.
dusheeno/favirecon
Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
dusheeno/feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
dusheeno/ffuf
Fast web fuzzer written in Go
dusheeno/ffufw
dusheeno/fzf
:cherry_blossom: A command-line fuzzy finder
dusheeno/gowitness
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
dusheeno/graphql-wordlist
The only graphql wordlists you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
dusheeno/HEDnsExtractor
A suite for hunting suspicious targets, expose domains and phishing discovery
dusheeno/juicyinfo-nuclei-templates
Nuclei (https://github.com/projectdiscovery/nuclei) templates for extracting juicy info from web pages
dusheeno/katana
A next-generation crawling and spidering framework.
dusheeno/leaky-paths
A collection of special paths linked to common internal paths, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.
dusheeno/metabigor
OSINT tools and more but without API ke
dusheeno/OldTweetDeck
Returns old TweetDeck, for free!
dusheeno/puter
🌐 The Web OS! Free, Open-Source, and Self-Hostable.
dusheeno/RepeaterSearch
This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response matches a query via simple text matching or Regex.
dusheeno/shortscan
An IIS short filename enumeration tool
dusheeno/SubProber
Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. The tool offers concurrent scanning, allowing users to define their preferred concurrency level for faster results. Whether you are on Linux, Windows, or macos
dusheeno/testssl.sh
Testing TLS/SSL encryption anywhere on any port
dusheeno/XSSGen