• Categories
  • Tools

    Below is a catalogue of different security tools, products, and services that I use in my work and personal life. These tools are being referenced as a convenience for informational purposes only and do not necessarily constitute an endorsement.

    WPScan

    WPScan is an open source WordPress security scanner. You can use it to scan your WordPress website for known vulnerabilities...

    Sublist3r

    Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers...

    SpiderFoot

    SpiderFoot is a reconnaissance tool that automatically queries over 100 public data sources (OSINT) to gather intelligence...

    Sn1per

    Sn1per works by automating a bunch of processes that collect basic recon on a target domain, (for example executing...

    Shodan

    Shodan is a search engine, like Google, but instead of searching for websites, it searches for internet-connected...

    ReVeRsE-IP

    A python based non-interactive ugly reverse IP lookup script to find domains on a target server.

    Recon-NG

    Recon-NG is a reconnaissance tool with an interface similar to Metasploit. Running Recon-NG from the command line,...

    Nmap

    Nmap  is a free and open source utility for network discovery and security auditing. Many systems and...

    IntelOwl

    IntelOwl is an Open Source Intelligence, or OSINT solution to get threat intelligence data about a specific file,...

    GrayhatWarfare

    GrayhatWarfare is a searchable database where a list of open S3 buckets can be found. Amazon's S3 cloud storage,...

    GoLismero

    GoLismero is an open source framework for security testing. It's currently geared towards web security, but...

    DataSploit

    DataSploit is an open source intelligence collection (OSINT) tool. It is a simple way to dump data for a domain...