cybercdh

kitphishr. A tool designed to hunt for Phishing Kit source code

phishfinder. A tool designed to traverse phishing URL paths to search for phishing kit source code.

dirlstr. Finds Directory Listings or open S3 buckets from a list of URLs

h2i. Converts a hostname (or URI) to IP address using your local resolver

cnames. take a list of resolved subdomains and output any corresponding CNAMES en masse.

nsfckup. Looks for NameServers which return an NXDOMAIN, which may indicate a NS Takeover opportunity.

vpaths. Take a list of URIs and print all the of the paths

bucket-finder. Reads in a list of domains or subdomains and crawls them for references to S3 buckets

assetfinder. Find domains and subdomains related to a given domain

goarl. Check for Akamai Resource Location misconfigurations

gotit. Returns the html title for a list of URLs

AWSKeyDecoder. Converts AWS Key IDs to AWS Account IDs en masse.

nsecwalkr. Enumerate NSEC records from a list of domains

meg. Fetch many paths for many hosts - without killing the hosts

tracr. tracr - DNS Tracer for Dangling Nameserver Detection

isaws. Checks if a list of IP addresses belong to AWS

make-circles. Plot circles around a point at a given radius

ipwzrd. Parses a list of domains and looks for dead IP addresses in DNS A records

filter-unresolved. takes a list of subdomains (i.e. CNAMES) and determines if they DON'T resolve

cnc. A utility to display files without comment lines

netcount. Reads in a list of CIDRs and calculates how many IPs are within each range

nimbonet. Go

validateDomains. Reads in a list of domains and prints those which have a valid TLD

tweets-by-location. Show tweets within a radius around a specified geolocation

tldvariant. Go

mxfckup. Go

netprobe. Convert IP addresses to hostnames at scale.

checkdomain. Check a list of domains to identify those available for registration

hurricane. Searchs Hurricane Electric for a given search term and returns all related IP ranges.

cocoatime. Converts Apple Cocoa Core Data timestamp to human-readable date

isbucket. Reads a list of strings and outputs if they exist in S3, GCP or Azure as storage buckets

cleandomain. Takes a list of domains on stdin and aims to clean them for parsing into other programs

codecounter. Go

bitflippr. Go

batchdns. Performs concurrent DNS requests and output the DNS Status

cybercdh.github.io. Ruby

cfip. Generates a list of valid AWS CloudFront IP addresses

bimiprobe. Reads in a list of domains from stdin and outputs any associated BIMI record

gonsec. Reads in a list of domains and enumerates additional domains from NSEC records

gh-org-repos. Simple utility wrapper around the Github API to print out all the repos under a given org. Requires an API key.

authblndr. Finds AuthZ blunders from HTTP endpoints at scale.