mmg1 Goto Github PK

dnscewl

A DNS Bruteforcing Wordlist Generator

dnsdelivery

DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.

dnsexfiltrator

Data exfiltration over DNS request covert channel

dnsgrep

Quickly Search Large DNS Datasets

dnslivery

Easy files and payloads delivery over DNS

dnsobserver

A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack.

dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

dnspy

.NET debugger and assembly editor

dnsrecon

DNS Enumeration Script

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

docker-cheat-sheet

Docker Cheat Sheet

docker-curriculum

:dolphin: A comprehensive tutorial on getting started with Docker!

docker-secure-deployment-guidelines

Deployment checklist for securely deploying Docker

docker-security

dockerized_fuzzing

Run fuzzing within Docker

dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

dolphin

Dolphin is a GameCube / Wii emulator, allowing you to play games for these two platforms on PC with improvements.

domain

Setup script for Regon-ng

domain-takeover-sample

domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

domain_hunter

A Burp Suite Extender that search sub domain and similar domain from sitemap,get related domains from certification

domainabandoneddetector

Detects abandoned domains referenced in HTML

domained

Subdomain Enumeration

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

domainrecon

Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for uphost and Run Masscan to grap CNAME entries, take the screenshot of all the found subdomains using WebScreeShot and more...

domato

DOM fuzzer

domdig

DOM XSS scanner for Single Page Applications