Mohammed Diaa

second-order. Second-order subdomain takeover scanner

chronos. Wayback Machine OSINT Framework

waybackrobots. Enumerate old versions of robots.txt paths using Wayback Machine for content discovery

acquiscan. Extract acquisition and subsidiary information from SEC filings

LinkFinder. A python script that finds endpoints in JavaScript files

git-all-secrets. A tool to capture all the git secrets by leveraging multiple open source git searching tools

acumen. A clean UI with a modular structure to enhance security researchers' ability to work with data

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

web-events. A list of of web events collected from MDN's Event Reference

dnsvalidator. Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

awsScrape. A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

tko-subs. Takeover Domains that have dangling CNAMES pointing to various CMS websites

nuclei. Fast and customizable vulnerability scanner based on simple YAML based DSL.

github-issues-search. A simple command-line tool to search GitHub issues.

commonspeak2. Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists