ExifTool is a command-line tool used for metadata manipulation in media. It is allows reading, writing, and editing meta-information in files. ExifTool is very popular for metadata because it is a platform-independent Perl library with a command-line application. ExifTool supports many different metadata formats including EXIF, GPS, IPTC, XMP, JFIF, GeoTIFF, ICC Profile, Photoshop IRB,…
Inurlbr is a tool that will automate the process of searching for specific dorks across various search engines. The advance search queries allow you to customize HTTP headers, capture emails, capture URLs, SQLi injection, vulnerability validation, proxy cycling, and more. Inurlbr is based on the PHP programming language. You will need to have PHP installed…
Search engine dorks are advanced search terms that can be crafted in a way that allows you to perform reconnaissance on a wide range of publicly available information on the web. Essentially, dorks are search queries formatted in a way that can find hidden and misconfigured data from websites. Common examples of these include: XSS,…
Photon is a python based OSINT web crawling and data extraction tool. It has many great features and is best used when you are looking to gather information from a birds-eye view. The reason Photon is best used for gathering birds-eye view data is because it will find hard-to-find pages, external links, broken links, and…
Wfuzz is a python based tool built for bruteforcing Web Applications. The tool is commonly used to find resources that are not directly linked such as directories, servlets, or scripts. Also, Wfuzz can bruteforce GET and POST parameters to check for different kind of injections (e.g., SQL, XSS, LDAP), bruteforce Forms parameters (e.g., User/Password), or…
If you are trying to gather information from a website, it is important to not only look at what is visible to the everyday user. Information gathering involves also looking and searching for hidden files. Hidden files do not necessarily mean they are purposely hidden, this could also just mean that someone forgot to take…
Firewalls and Intrusion Prevention Systems (IDS) have become more advanced over the years with the ability to detect various sophisticated attacks. Although the technology in these systems exists to detect network scanning, who is to say that the system administrator might have forgotten to fix a misconfigured server? This is why scanning with specific techniques…
DNSTwist is a tool that is used to search and check for a list of similar domain names as the one entered, while verifying if they are available to be registered or currently active. The most common use cases for this tool is to detect possible: typosquatters phishing attacks fraud brand impersonation If hired for…
The Fierce command line tool is a DNS reconnaissance tool for locating non-contiguous IP space using DNS records. This tool does not perform exploitation and does not scan the whole internet indiscriminately. Although this tool also scans networks like NMAP, it can excel at finding misconfigured networks that leak internal address space because it uses DNS primarily….
The HackerTarget.com tool suite is a complete freemium vulnerability scanning solution that allows organizations to test their internet perimeter and servers from an external perspective. HackerTarget.com exposes its IP tools through an API. A variety of supported tools include: traceroute, ping test, forward and reverse DNS lookup, WHOIS lookup, GeoIP lookup, reverse IP lookup, HTTP…