Mirrors/h4cker
2
0
Fork 0
mirror of https://github.com/The-Art-of-Hacking/h4cker synced 2024-11-24 20:03:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

Adding breached data search tools

Browse source
This commit is contained in:
Omar Santos 2021-06-18 18:48:37 -04:00 committed by GitHub
parent 2ad8d413ee
commit 4361567552
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 40 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

71
osint/README.md
View file

@ -21,28 +21,32 @@ Open-source intelligence (OSINT) is data collected from open source and publicly
- [Xenu](http://home.snafu.de) - [Xenu](http://home.snafu.de)
- [ParamSpider](https://github.com/devanshbatham/ParamSpider) - [ParamSpider](https://github.com/devanshbatham/ParamSpider)
## The OSINT Framework
- [OSINT Framework](https://osintframework.com)
## Open Source Threat Intelligence ## Open Source Threat Intelligence
- [GOSINT](https://github.com/ciscocsirt/gosint) - a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs). GOSINT allows a security analyst to collect and standardize structured and unstructured threat intelligence. - [GOSINT](https://github.com/ciscocsirt/gosint) - a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs). GOSINT allows a security analyst to collect and standardize structured and unstructured threat intelligence.
- [Awesome Threat Intelligence](https://github.com/santosomar/awesome-threat-intelligence) - A curated list of awesome Threat Intelligence resources. This is a great resource and I try to contribute to it. - [Awesome Threat Intelligence](https://github.com/santosomar/awesome-threat-intelligence) - A curated list of awesome Threat Intelligence resources. This is a great resource and I try to contribute to it.
## Active and Passive Reconnaissance Tips and Tools
### Passive Recon ### Website Exploration and "Google Hacking"
- censys : https://censys.io
- Certficate Search: https://crt.sh/
- ExifTool: https://www.sno.phy.queensu.ca/~phil/exiftool
- Google Hacking Database (GHDB): https://www.exploit-db.com/google-hacking-database
- Google Transparency Report: https://transparencyreport.google.com/https/certificates
- Huge TLS/SSL certificate DB with advanced search: https://certdb.com
- netcraft: https://searchdns.netcraft.com
- SiteDigger: http://www.mcafee.com/us/downloads/free-tools/sitedigger.aspx
- Spyse: https://spyse.com
#### Website Exploration and "Google Hacking" ### Data Breach Query Tools
* censys - https://censys.io - BaseQuery: https://github.com/g666gle/BaseQuery
* Spyse - https://spyse.com - Buster: https://github.com/sham00n/buster
* netcraft - https://searchdns.netcraft.com - h8mail: https://github.com/khast3x/h8mail
* Google Hacking Database (GHDB) - https://www.exploit-db.com/google-hacking-database - LeakLooker: https://github.com/woj-ciech/LeakLooker
* ExifTool - https://www.sno.phy.queensu.ca/~phil/exiftool - PwnDB: https://github.com/davidtavarez/pwndb
* Certficate Search - https://crt.sh/ - Scavenger: https://github.com/rndinfosecguy/Scavenger
* Huge TLS/SSL certificate DB with advanced search - https://certdb.com - WhatBreach: https://github.com/Ekultek/WhatBreach
* Google Transparency Report - https://transparencyreport.google.com/https/certificates
* SiteDigger - http://www.mcafee.com/us/downloads/free-tools/sitedigger.aspx
### IP address and DNS Lookup Tools ### IP address and DNS Lookup Tools
- [bgp](https://bgp.he.net/) - [bgp](https://bgp.he.net/)
@ -59,31 +63,36 @@ Open-source intelligence (OSINT) is data collected from open source and publicly
- [Viewdns](https://viewdns.info/) - [Viewdns](https://viewdns.info/)
- [Umbrella (OpenDNS) Popularity List](http://s3-us-west-1.amazonaws.com/umbrella-static/index.html) - [Umbrella (OpenDNS) Popularity List](http://s3-us-west-1.amazonaws.com/umbrella-static/index.html)
#### Social Media ### Social Media
* A tool to scrape LinkedIn: https://github.com/dchrastil/TTSL * A tool to scrape LinkedIn: https://github.com/dchrastil/TTSL
* cree.py http://ilektrojohn.github.com/creepy * cree.py http://ilektrojohn.github.com/creepy
#### Whois ### Whois
WHOIS information is based upon a tree hierarchy. ICANN (IANA) is the authoritative registry for all of the TLDs and is a great starting point for all manual WHOIS queries. WHOIS information is based upon a tree hierarchy. ICANN (IANA) is the authoritative registry for all of the TLDs and is a great starting point for all manual WHOIS queries.
* ICANN - http://www.icann.org
* IANA - http://www.iana.com - ICANN: http://www.icann.org
* NRO - http://www.nro.net - IANA: http://www.iana.com
* AFRINIC - http://www.afrinic.net - NRO: http://www.nro.net
* APNIC - http://www.apnic.net - AFRINIC: http://www.afrinic.net
* ARIN - http://ws.arin.net - APNIC: http://www.apnic.net
* LACNIC - http://www.lacnic.net - ARIN: http://ws.arin.net
* RIPE - http://www.ripe.net - LACNIC: http://www.lacnic.net
- RIPE: http://www.ripe.net
### BGP looking glasses ### BGP looking glasses
* BGP4 - http://www.bgp4.as/looking-glasses - BGP4: http://www.bgp4.as/looking-glasses
* BPG6 - http://lg.he.net/ - BPG6: http://lg.he.net/
### DNS ### DNS
* dnsenum - http://code.google.com/p/dnsenum - dnsenum - http://code.google.com/p/dnsenum
* dnsmap - http://code.google.com/p/dnsmap - dnsmap: http://code.google.com/p/dnsmap
* dnsrecon - http://www.darkoperator.com/tools-and-scripts - dnsrecon: http://www.darkoperator.com/tools-and-scripts
* dnstracer - http://www.mavetju.org/unix/dnstracer.php - dnstracer: http://www.mavetju.org/unix/dnstracer.php
* dnswalk - http://sourceforge.net/projects/dnswalk - dnswalk: http://sourceforge.net/projects/dnswalk
## The OSINT Framework
- [OSINT Framework](https://osintframework.com)
## Dark Web OSINT Tools ## Dark Web OSINT Tools
### Dark Web Search Engine Tools ### Dark Web Search Engine Tools