Penetration Testing

Tools

1. ASNLookup

2. XMind

3. Crunchbase

4. Hurricane Electric Internet Company

5. Metabigor. (video)

6. OWASP AMASS. owasp.org/www-project-amass/

7. www.whoxy.com/

8. DomLink

9. builtwith.com/

10. builtwith.com/relationships/twitch.tv

11. github.com/m4ll0k/BBTz/blob/master/getrelationship.py

12. www.shodan.io/

13. portswigger.net/burp

14. github.com/hakluke/hakrawler

15. github.com/jaeles-project/gospider

16. github.com/nsonaniya2010/SubDomainizer

17. github.com/m8r0wn/subscraper

18. github.com/projectdiscovery/subfinder

19. github.com/gwen001/github-subdomains

20. github.com/incogbyte/shosubgo

21. github.com/pry0cc/cloud-ranges

22. www.kali.org/tools/masscan/

23. github.com/erbbysam

24. tls.bufferover.run/dns?q=.defcon.org

25. www.daehee.com/scan-aws-ip-ssl-certificates/

26. sslscan

27. tls-scan

28. github.com/blechschmidt/massdns

29. github.com/projectdiscovery/shuffledns

30. Who, What, Where, When, Wordlist by @TomNomNom #NahamCon2020 (TomNomNom)

31. portswigger.net/web-security

32. github.com/devanshbatham/FavFreak

33. danielmiessler.com/study/masscan/

34. github.com/assetnote/commonspeak2-wordlists

35. github.com/p33kab00/dns-masscan

36. github.com/x90skysn3k/brutespray

37. github.com/gwen001

38. Th3G3nt3lman Shares His Recon Methodology and How He Consistently Collects $15,000 Bounties!

39. GitHub Recon and Sensitive Data Exposure

40. securitytrails.com/blog/aquatone

41. github.com/breenmachine/httpscreenshot

42. Eyewitness

43. Witnessme

44. Can I Take Over XYZ

45. Nuclei Scanner

46. Subover

47. Interlace. (tutorial)

48. github.com/epi052/recon-pipeline

49. www.spiderfoot.net/

Programs

1. Bug Crowd

2. HackerOne