DOCSEARCHbyAlgolia
Submit Docs

WebHackersWeapons

repository·main·Indexed 26 days ago

https://github.com/hahwul/webhackersweapons

A curated repository of tools, bookmarklets, and extensions for web security researchers and bug hunters. The collection is organized by functional types—such as Army-Knife, Proxy, Recon, Fuzzer, Scanner, and Exploit—and indexed by technical tags covering vulnerabilities (sqli, xss, ssrf), protocols (http, graphql, dns), and reconnaissance methodologies (osint, asset-discovery).

Tokens
34.3K
Snippets
175
Records
384
Agent score
88%

What's inside WebHackersWeapons

  1. Overview of WebHackersWeapons

    main
    WebHackersWeapons is a curated collection of tools designed for web hackers and bug hunters. The repository organizes resources into several categories including specialized tools, bookmarklets, browser addons, and extensions for proxy tools like Burp Suite, Caido, and ZAP.

  2. Discover subdomain enumeration and recon tools

    main

    The subdomains category contains a collection of tools used for subdomain discovery, DNS resolution, and reconnaissance. These tools range from passive discovery frameworks to active brute-forcing and permutation generators.

    Key functional groups include:

    • Discovery & Enumeration: Tools like subfinder, Amass, assetfinder, and Sublist3r for finding valid subdomains.
    • Bruteforcing & Resolution: puredns for fast domain resolution and gobuster for DNS busting.
    • Permutation & Mutation: altdns, dmut, and alterx for generating subdomain variations.
    • Takeover Detection: subjack, subzy, Sub404, and SubOver for checking subdomain takeover vulnerabilities.
    • Specialized Recon: shosubgo (Shodan API), github-subdomains (GitHub search), and subjs (JS file fetching).

  5. Discover tools for cache vulnerability testing

    main

    The following tools are categorized for testing web cache vulnerabilities (cache-vuln). They include fuzzers for parameter discovery and scanners for identifying cache poisoning vulnerabilities.

    Fuzzers

    • ParamPamPam: Used for brute-force discovery of GET and POST parameters. (Python, Linux, macOS, Windows)
    • param-miner: A tool for parameter mining, often used as a Burp Suite extension. (Java, Linux, macOS, Windows)

    Scanners

    • web_cache_poison: A scanner focused on web cache poisoning techniques. (Shell, Linux, macOS, Windows)
    • FockCache: A minimalized tool for testing cache poisoning. (Go, Linux, macOS, Windows)
    • Web-Cache-Vulnerability-Scanner: A Go-based CLI tool developed by Hackmanit GmbH for testing web cache poisoning. (Go, Linux, macOS, Windows)
    • autopoisoner: A web cache poisoning vulnerability scanner. (Python, Linux, macOS, Windows)

  9. DNS Reconnaissance and Resolution Tools

    main

    The following tools are categorized for DNS reconnaissance, subdomain enumeration, and resolution tasks:

    Domain Resolvers and Bruteforcers

    • puredns: A fast domain resolver and subdomain bruteforcing tool. It features accurate filtering for wildcard subdomains and DNS poisoned entries. (Go)
    • rusolver: A fast and accurate DNS resolver. (Rust)
    • zdns: A fast CLI-based DNS lookup tool. (Go)
    • shuffledns: A Go wrapper around massdns designed to enumerate valid subdomains using active bruteforce, featuring wildcard handling and streamlined I/O. (Go)
    • altdns: Generates permutations, alterations, and mutations of subdomains and resolves them. (Python)

    DNS Toolkits and Querying

    • dnsx: A fast, multi-purpose DNS toolkit that allows running multiple custom DNS queries using a list of user-supplied resolvers. (Go)
    • dnsprobe: A tool built on top of retryabledns that enables performing multiple custom DNS queries with user-supplied resolvers. (Go)
    • scilla: An information gathering tool for DNS, subdomain, and port enumeration. (Go)
    • BLUTO: A dedicated DNS analysis tool. (Python)

    DNS Validation and Monitoring

    • dnsvalidator: Verifies IPv4 DNS servers against baseline servers to ensure accurate responses and maintain a reliable list of servers. (Python)
    • dnsobserver: A Go-based DNS service used to detect blind vulnerabilities by monitoring for out-of-band (OAST) DNS interactions and sending notifications via Slack.

  10. Explore C++ based security and utility tools

    main
    The webhackersweapons repository categorizes various tools by programming language. Tools written in C++ include utility applications like Clipboard and security research resources like security-research-pocs from Google. These tools are generally cross-platform, supporting Linux, macOS, and Windows.

  11. Use the Baudrillard Suite for social engineering and security research

    main

    The Baudrillard Suite is a cross-platform security research toolkit. It provides capabilities for OSINT aggregation, memory forensics, social engineering, steganography, and predictive threat modeling. It is compatible with Linux, macOS, and Windows, and is written in Python.

    https://github.com/bad-antics/baudrillard-suite