Enumeration Open Source Projects

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Web path scanner

Fast passive subdomain enumeration tool.

Tools and Techniques for Red Team / Penetration Testing

A fast, simple, recursive content discovery tool written in Rust.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Static reflection for enums (to string, from string, iteration) for modern C++, work with any enum type without any macro or boilerplate code

A curated list of various bug bounty tools

Monitor linux processes without root permissions

Web Attack Cheat Sheet

🤖 An elegant Telegram bots framework for Rust

Linux enumeration tool for pentesting and CTFs with verbosity levels

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux and Ubuntu.

Practical Ethical Hacking Labs 🗡🛡

A high performance offensive security tool for reconnaissance and vulnerability scanning

Automated NoSQL database enumeration and web application exploitation tool.

A collection of custom security tools for quick needs.

DNS Enumeration Script

Kali Linux Cheat Sheet for Penetration Testers

A collection of snippets of codes and commands to make your life easier!

Fancy reverse and bind shell handler

All In One Web Recon

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

无状态子域名爆破工具

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

:new: The Multi-Tool Web Vulnerability Scanner.

SMBMap is a handy SMB enumeration tool

Simple, extensible and powerful enumeration implementation for Laravel.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

The Offensive Manual Web Application Penetration Testing Framework.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

A collection of awesome one-liners for bug bounty hunting.

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Security Tool to Look For Interesting Files in S3 Buckets

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

Recommended C code style and coding rules for standard C99 or later

Font management (System & Custom) for iOS and tvOS

A cross-platform 2D game engine

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

Red Team Cheatsheet in constant expansion.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

A type-safe, reflection-free, powerful enumeration implementation for Scala with exhaustive pattern match warnings and helpful integrations.

💻 Certified ethical hacker summary in bullet points

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

A collection of Red Team focused tools, scripts, and notes

Interactive Network Scanner

Username enumeration and password spraying tool aimed at Microsoft O365.

Automatic Enumeration Tool based in Open Source tools

A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam

Subdomain and target enumeration tool built for offensive security testing

Java RMI Vulnerability Scanner