gdm/pentest.md

Last active June 15, 2019 19:41

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/gdm/d6c20a9d0fb2bc3f72a9bc08c9329ad6.js"></script>
Save gdm/d6c20a9d0fb2bc3f72a9bc08c9329ad6 to your computer and use it in GitHub Desktop.

Download ZIP

Tools for pentesters

Raw

Tools for pentests

Initially based on youtube video Bug Bounty Hunting Methodology v2 - Jason Haddix from Bugcrowd's LevelUp 2017

Discovery

https://github.com/anshumanbh/brutesubs
https://tools.kali.org/information-gathering/recon-ng
https://github.com/aboul3la/Sublist3r
Enumeration for cloudflare DNS cloudflare_enum
Subdomain bruteforcing: (all.txt - list of about 1 000 000 items for bruteforcing)
- subbrute
- gobuster (good results)
- massdns (best results because of distributed scan)
- dns-parallel-prober
- blacksheepwall

acquisition

crunchbase.com other sources ?

port scanning

masscan
nmap

Visual identification (sceershots)

EyeWitness

Books

Mastering Modern Web Penetration Testing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment