Black Lantern Security

All

81 repositories

badsecrets
Public
A library for detecting known secrets across many web frameworks
rails flask jwt django cryptography symfony peoplesoft asp-net express-js appsec
Python
•
GNU General Public License v3.0
•50•584•14•2•Updated Feb 15, 2025Feb 15, 2025
cloudcheck
Public
Check whether an IP address or hostname belongs to popular cloud providers
python cli cloud osint pipeline cloud-providers python-library pypi ip asn
Python
•6•56•3•4•Updated Feb 15, 2025Feb 15, 2025
bbot
Public
The recursive internet scanner for hackers. 🧡
python cli automation osint neo4j scanner asm hacking recursion pentesting
Python
•
GNU General Public License v3.0
•592•7.8k•96•12•Updated Feb 15, 2025Feb 15, 2025
baddns
Public
Check subdomains for subdomain takeovers and other DNS tomfoolery
Python
•
GNU General Public License v3.0
•18•286•7•8•Updated Feb 13, 2025Feb 13, 2025
impacket
Public
Impacket is a collection of Python classes for working with network protocols.
Python
•
Other
•3.6k•1•0•0•Updated Feb 13, 2025Feb 13, 2025
certipy-merged
Public
Tool for Active Directory Certificate Services enumeration and abuse
Python
•
MIT License
•359•0•0•0•Updated Feb 13, 2025Feb 13, 2025
BloodHound.py
Public
A Python based ingestor for BloodHound
Python
•
MIT License
•335•0•0•0•Updated Feb 13, 2025Feb 13, 2025
pypykatz
Public
Mimikatz implementation in pure Python
Python
•
MIT License
•388•0•0•0•Updated Feb 13, 2025Feb 13, 2025
radixtarget
Public
RadixTarget is a performant radix implementation designed for quick lookups of IP addresses/networks and DNS hostnames.
python networking python-library pypi pentesting radix-tree radix pypi-package
Python
•
GNU General Public License v3.0
•1•6•1•2•Updated Feb 10, 2025Feb 10, 2025
wapalyzer
Public
🌐 Identify the technologies powering any website. This is a fork of the now deleted Wappalyzer project by @AliasIO and community.
JavaScript
•
GNU General Public License v3.0
•44•3•0•15•Updated Feb 9, 2025Feb 9, 2025
wordpredictor
Public
Predicts complete words from prefixes using vector-based word similarity.
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Jan 8, 2025Jan 8, 2025
writehat
Public
A pentest reporting tool written in Python. Free yourself from Microsoft Word.
Python
•
GNU General Public License v3.0
•234•1.3k•34•4•Updated Dec 18, 2024Dec 18, 2024
NetExec
Public
The Network Execution Tool
Python
•
BSD 2-Clause "Simplified" License
•409•0•0•0•Updated Dec 10, 2024Dec 10, 2024
TREVORspray
Public
TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!
microsoft python security oauth email hacking password office socks exchange
Python
•
GNU General Public License v3.0
•155•1.1k•3•1•Updated Nov 13, 2024Nov 13, 2024
bbot-vivagraphjs
Public
Visualize BBOT scans in realtime with VivaGraphJS
visualization javascript webgl osint graph vivagraph bbot vivagraphjs
HTML
•3•43•3•0•Updated Nov 6, 2024Nov 6, 2024
public-dns-servers
Public
A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!
python list automation osint pipeline public python3 recon cicd resolvers
Python
•2•24•1•1•Updated Sep 2, 2024Sep 2, 2024
dp_cryptomg
Public
Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
cryptography vulnerability telerik-ui cve-2017-9248
Python
•
GNU Affero General Public License v3.0
•8•46•6•0•Updated Aug 21, 2024Aug 21, 2024
Certipy
Public
Tool for Active Directory Certificate Services enumeration and abuse
Python
•
MIT License
•359•2•0•0•Updated Aug 2, 2024Aug 2, 2024
MANSPIDER
Public
Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!
Python
•
GNU General Public License v3.0
•135•1.1k•11•4•Updated Jul 18, 2024Jul 18, 2024
TREVORproxy
Public
A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!
python proxy-server socks ip-address trevor password-spray hack-tool waf-bypass proxy socks5
Python
•
GNU General Public License v3.0
•50•337•2•2•Updated Jul 11, 2024Jul 11, 2024
python-future
Public
Easy, clean, reliable Python 2/3 compatibility
Python
•
MIT License
•295•0•0•0•Updated Feb 5, 2024Feb 5, 2024
wappalyzergo
Public
A high performance go implementation of Wappalyzer Technology Detection Library
Go
•
MIT License
•127•0•0•0•Updated Jan 15, 2024Jan 15, 2024
CrackMapExec
Public
A swiss army knife for pentesting networks
Python
•
BSD 2-Clause "Simplified" License
•1.7k•1•0•0•Updated Oct 25, 2023Oct 25, 2023
bls-bible
Public
BLS-Bible is a knowledge-base application that houses a collection of guides and write-ups that BLS uses for our various operations.
python penetration-testing pentesting guides red-team blue-team knowledge-base-system
Python
•
GNU General Public License v3.0
•7•27•1•4•Updated Aug 28, 2023Aug 28, 2023
bbot-1
Public
OSINT automation for hackers.
Python
•
GNU General Public License v3.0
•592•11•0•0•Updated Jun 27, 2023Jun 27, 2023
wappalyzer
Public
Identify technology on websites.
JavaScript
•
GNU General Public License v3.0
•2.3k•1•0•0•Updated Jun 15, 2023Jun 15, 2023
can-i-take-over-xyz
Public
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Python
•
Creative Commons Attribution 4.0 International
•737•2•0•0•Updated May 30, 2023May 30, 2023
sccmhunter
Public
Python
•88•1•0•0•Updated May 15, 2023May 15, 2023
spiderfoot
Public
SpiderFoot automates OSINT collection so that you can focus on analysis.
Python
•
GNU General Public License v2.0
•2.4k•11•0•2•Updated Apr 20, 2023Apr 20, 2023
ASM_BBOT_Training
Public
HCL
•3•2•0•0•Updated Apr 14, 2023Apr 14, 2023