Domain and IP Research
Domain and IP Research
Nota atomica extraida de la seccion "Domain and IP Research" del master osint-references-master. Concepto unico = nota propia.
Recursos (de awesome-osint)
- aa419 Fake Sites Database - The site lists fraudulent websites, such as fake banks and online scams, identified by the Artists Against 419 community.
- Accuranker
- ahrefs - A tool for backlink research, organic traffic research, keyword research, content marketing & more.
- Azure Tenant Resolution by PingCastle - Search for Azure Tenant using its domain name or its ID
- Bgpview.io - The website bgpview.io allows you to look up detailed information about ASNs, IPs, and BGP routes on the internet.
- Bing Webmaster Tools
- Browserling - Browserling is an online sandbox that lets users safely test potentially malicious links across browsers and operating systems in real time.
- BuiltWith - is a website that will help you find out all the technologies used to build a particular websites.
- Central Ops
- Crypto Scam & Crypto Phishing URL Threat Intel Feed - A fresh feed of crypto phishing and crypto scam websites. Automatically updated daily.
- Dedicated or Not
- DNS History
- DNSDumpster - is a website that will help you discover hosts related to a specific domain.
- DNSStuff
- DNSViz
- Domain Crawler
- Domain Dossier
- DomainRecon - Retrieve DNS records, subdomains, SSL certificates and WHOIS / RDAP data for a given website.
- Domain Tools - Whois lookup and domain/ip historical data.
- Easy whois
- Exonera Tor - A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
- Focsec - Threat Intelligence API that detects if a IP address is associated with a VPN, Proxy, TOR or Bots.
- Follow.net
- Fullhunt - FullHunt is an OSINT tool focused on identifying and protecting internet-exposed assets.
- GraphyStories
- Hudson Rock - is a free cybercrime intelligence toolkit to check exposure in Infostealer malware infection.
- Hybrid Analysis - Online service for detailed and free analysis of suspicious files and URLs.
- HypeStat
- Icann Lookup - The site allows you to look up domain registration information (WHOIS) on the internet
- Infosniper
- isMalicious - Threat intelligence platform aggregating malicious IP and domain data from multiple security feeds with real-time reputation scoring and threat categorization.
- IntoDNS.ai - AI-powered DNS and email security scanner with SPF, DKIM, DMARC, DNSSEC checks and fix suggestions.
- IP 2 Geolocation
- IP 2 Location
- IP Geolocation API DB-IP - Pprovides IP geolocation and intelligence.
- IP Checking
- IP Location - is used for mapping of an IP address or MAC address to the real-world geographic location of an Internet-connected computing or a mobile device.
- IP Location.io - IPLocation.io allows you to check the location of an IP for free
- IPFingerprints - is used to find the approximate geographic location of an IP address along with some other useful information including ISP, TimeZone, Area Code, State.
- IPVoid - IP address toolset.
- ISP.Tools - Is a free platform offering network diagnostic tools (ping, traceroute, MTR, DNS, WHOIS, HTTP, etc.) tailored for ISPs and infrastructure professionals.
- Kloth
- Majestic - Find out who links to your website.
- Mark Monitor WHOIS - Displays domain registration information.
- MaxMind
- MetaDefender - Threat analysis service for URLs, files, certificates, domains, and suspicious hashes.
- Netcraft Site Report - is an online database that will provide you a report with detail information about a particular website and the history associated with it.
- OpenLinkProfiler
- PageGlimpse
- Pentest-Tools.com - uses advanced search operators (Google Dorks) to find juicy information about target websites.
- PhishStats
- Pulsedive
- Qualys SSL Check - SSL Test configuration compliance.
- Quantcast
- Quick Sprout
- RedirectDetective
- Remote DNS Lookup
- Robtex - is an IP address and domain name based researching websites that offers multiple services such as Reverse DNS Lookup, Whois, and AS Macros.
- SameID
- SecurityTrails - API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
- SubDomainRadar.io - Fast subdomain finder with multiple search modes and the most extensive data sources, offering real-time notifications.
- SEMrush
- SEO Chat Tools
- SEOTools for Excel
- Similar Web - Compare any website traffic statistics & analytics.
- SmallSEOTools
- Squatm3gator - Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
- StatsCrop
- TinyScan - Another powerful URL scan tool that provides comprehensive information about any given URL. Get insights into IP address, location, screenshots, technology stack, performance metrics, and more.
- TracerouteVisualizer - An online tool that displays your mtr / traceroute / flyingroutes output on a map for visual analysis.
- urlDNA - Unleash website insights! urldna.io analyzes url, monitors brands and track phishing sites.
- URLhaus - URLhaus shares malicious URLs to combat malware and botnet threats
- urlQuery
- urlscan - is a free service to scan and analyse websites.
- URLVoid - Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
- Validin - Website and API to search current and historical DNS records for free
- Verisign
- ViewDNS.info
- Virus Total - Analyse suspicious domains, IPs URLs and files to detect malware and other breaches
- w3snoop - is a website that gives you a free and comprehensive report about a specific website.
- Web-Check - All-in-one tool for viewing website and server meta data.
- WebMeUp - is the Web's freshest and fastest growing backlink index, and the primary source of backlink data for SEO PowerSuite.
- Webscore - Enter a website URL to check its legitimacy.
- Webscout - A Swiss Army knife for scaled intelligence and metadata on IP addresses and domains.
- Website Informer
- WebsiteTechMiner.py - automates gathering website profiling data into a CSV from the "BuiltWith" or "Wappalyzer" API for tech stack information, technographic data, website reports, website tech lookups, website architecture lookups, etc.
- WhatIsMyIPAddress
- Who.is - Domain whois information.
- Whois Arin Online - is a web service for Whois data contained within ARIN's registration database
- WhoIsHostingThis
- WhoisMind
- Whoisology
- WhoIsRequest
- WiGLE - Wi-fi "wardriving" database. Contains a global map containing crowdsourced information on the location, name, and other properties of wi-fi networks. Software available to download to contribute data to the public infoset.
- You Get Signal
Tambien desde OSINT Bible — 7. Domain / IP / DNS
Fuente complementaria del master osint-references-master.
| Objective | Tool | Quick Command |
|---|---|---|
| Subdomains | Amass | amass enum -d target.com -o subs.txt |
| Certificates | CRT.sh | curl https://crt.sh/?q=%25.target.com&output=json |
| Historical DNS | SecurityTrails | Free API 50/month |
| Neighbor IPs | BGP.he | CIDR |
| Reputation | VirusTotal | vt ip_info <ip> |
| Quick scan | Nmap-online | no VPN |
| Subdomains | Subdomain Center | https://www.subdomain.center |
| Subdomains | SubdomainRadar | https://www.subdomainradar.io |
| Historical DNS | DNSTrails | https://dnstrails.com/ |
| Historical DNS | DNS History | http://dnshistory.org |
| Reputation | Talos | https://www.talosintelligence.com/ |
| Scan | Binary Defense | https://www.binarydefense.com/banlist.txt |
| BGP Ranking | CIRCL BGP | https://bgpranking.circl.lu |
| Botnet Tracker | MalwareTech | https://intel.malwaretech.com/ |
| BOTVRIJ.EU | BOTVRIJ | http://www.botvrij.eu/ |
| C&C Tracker | Bambenek | http://osint.bambenekconsulting.com/feeds/c2-ipmasterlist.txt |
| CertStream | CertStream | https://certstream.calidog.io/ |
| CCSS Forum | CCSS Forum | http://www.ccssforum.org/malware-certificates.php |
| CI Army List | CINS Score | http://cinsscore.com/#list |
| Cisco Umbrella | Cisco Umbrella | http://s3-us-west-1.amazonaws.com/umbrella-static/index.html |
| Cloudmersive | Cloudmersive | https://cloudmersive.com/virus-api |
| Critical Stack | Critical Stack | https://intelstack.com/ |
| CrowdSec | CrowdSec | https://app.crowdsec.net/ |
| Cyber Cure | Cyber Cure | https://www.cybercure.ai/ |
| Cyware | Cyware | https://cyware.com/community/ctix-feeds |
| DataPlane | DataPlane | https://dataplane.org/ |
| Focsec | Focsec | https://focsec.com |
| DigitalSide | DigitalSide | https://osint.digitalside.it/ |
| Disposable Domains | Disposable Domains | https://github.com/martenson/disposable-email-domains |
| Emerging Threats | Emerging Threats | http://rules.emergingthreats.net/fwrules/ |
| ExoneraTor | ExoneraTor | https://exonerator.torproject.org/ |
| Exploitalert | Exploitalert | http://www.exploitalert.com/ |
| FastIntercept | FastIntercept | https://intercept.sh/threatlists/ |
| Feodo Tracker | Feodo Tracker | https://feodotracker.abuse.ch/ |
| FireHOL | FireHOL | http://iplists.firehol.org/ |
| FraudGuard | FraudGuard | https://fraudguard.io/ |
| Grey Noise | Grey Noise | http://greynoise.io/ |
| Hail a TAXII | Hail a TAXII | http://hailataxii.com/ |
| HoneyDB | HoneyDB | https://riskdiscovery.com/honeydb/ |
| Icewater | Icewater | https://github.com/SupportIntelligence/Icewater |
| Infosec CERT-PA | Infosec CERT-PA | https://infosec.cert-pa.it |
| InQuest Labs | InQuest Labs | https://labs.inquest.net |
| I-Blocklist | I-Blocklist | https://www.iblocklist.com/lists |
| IPsum | IPsum | https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt |
| James Brine | James Brine | https://jamesbrine.com.au |
| Kaspersky Feeds | Kaspersky | https://support.kaspersky.com/datafeeds |
| Maldatabase | Maldatabase | https://malcore.io |
| Malpedia | Malpedia | https://malpedia.caad.fkie.fraunhofer.de/ |
| MalShare | MalShare | http://www.malshare.com/ |
| Maltiverse | Maltiverse | https://www.maltiverse.com/ |
| MalwareBazaar | MalwareBazaar | https://bazaar.abuse.ch/ |
| Malware Domain List | Malware Domain List | https://www.malwarepatrol.net/ |
| MetaDefender | MetaDefender | https://www.opswat.com/developers/threat-intelligence-feed |
| Netlab OpenData | Netlab | https://data.netlab.360.com/ |
| NoThink! | NoThink! | http://www.nothink.org |
| NormShield | NormShield | https://services.normshield.com |
| NovaSense | NovaSense | https://novasense-threats.com |
| Obstracts | Obstracts | https://www.obstracts.com/ |
| OpenPhish | OpenPhish | https://openphish.com/phishing_feeds.html |
| 0xSI_f33d | 0xSI_f33d | https://feed.seguranca-informatica.pt/index.php |
| PhishTank | PhishTank | https://www.phishtank.com/developer_info.php |
| PickupSTIX | PickupSTIX | https://www.celerium.com/pickupstix |
| REScure | REScure | https://rescure.fruxlabs.com/ |
| RST Cloud | RST Cloud | https://rstcloud.net/ |
| Rutgers IPs | Rutgers | https://report.cs.rutgers.edu/mrtg/drop/dropstat.cgi?start=-86400 |
| SANS ICS | SANS ICS | https://isc.sans.edu/suspicious_domains.html |
| SecurityScorecard | SecurityScorecard | https://github.com/securityscorecard/SSC-Threat-Intel-IoCs |
| Stixify | Stixify | https://www.stixify.com/ |
| signature-base | signature-base | https://github.com/Neo23x0/signature-base |
| Spamhaus | Spamhaus | https://www.spamhaus.org/ |
| Sophos Intelix | Sophos | https://www.sophos.com/intelix |
| Spur | Spur | https://spur.us |
| SSL Blacklist | SSL Blacklist | https://sslbl.abuse.ch/ |
| Statvoo | Statvoo | https://statvoo.com/dl/top-1million-sites.csv.zip |
| Strongarm | Strongarm | https://strongarm.io |
| SIEM Rules | SIEM Rules | https://www.siemrules.com |
| Talos | Talos | https://www.talosintelligence.com/ |
| threatfeeds.io | threatfeeds.io | https://threatfeeds.io |
| threatfox | threatfox | https://threatfox.abuse.ch/ |
| Technical Blogs | Technical Blogs | https://www.threatconnect.com/blog/ingest-technical-blogs-reports/ |
| Threat Jammer | Threat Jammer | https://threatjammer.com |
| ThreatMiner | ThreatMiner | https://www.threatminer.org/ |
| ThreatPipes | ThreatPipes | https://www.threatpipes.com |
| ThreatExchange | ThreatExchange | https://developers.facebook.com/docs/threat-exchange/ |
| TypeDB CTI | TypeDB CTI | https://github.com/typedb-osi/typedb-cti |
| VirusBay | VirusBay | https://beta.virusbay.io/ |
| threatnote.io | threatnote.io | https://github.com/brianwarehime/threatnote |
| XFE | XFE | https://exchange.xforce.ibmcloud.com/ |
| Yeti | Yeti | https://yeti-platform.github.io/ |
| 1st Dual Stack | 1st Dual Stack | https://IOCFeed.mrlooquer.com/ |
| Yara-Rules | Yara-Rules | https://github.com/Yara-Rules/rules |
| VirusShare | VirusShare | https://virusshare.com/ |
| CIRCL PDNS | CIRCL PDNS | https://www.circl.lu/services/passive-dns |
| InTheWild | InTheWild | https://inthewild.io |
| 360 Quake | 360 Quake | https://quake.360.net |
| Cloudflare Radar | Cloudflare Radar | https://radar.cloudflare.com/traffic |
| Validin | Validin | https://app.validin.com |
| OSV | OSV | https://osv.dev |
| Coalition ESS | Coalition ESS | https://ess.coalitioninc.com |
| Certs | Certs | https://certs.io |
| CastrickClues | CastrickClues | https://castrickclues.com |
| TheWebCo | TheWebCo | https://thewebco.ai |
7.1 Google Dorks – Domains
site:*.target.com filetype:pdf
site:*.target.com intitle:"dashboard"
site:*.target.com intext:"confidential"
Desde Inbox: Direccion de IP
Importado desde
Inbox/Direccion de IP.mddurante consolidacion bulk.
Direccion de IP - Indice de Recursos de Investigacion IP
Resumen
Indice maestro que organiza todos los recursos disponibles para la investigacion de direcciones IP. Cada seccion enlaza a un catalogo detallado de herramientas especificas.
Categoria
Investigacion de infraestructura / Direcciones IP / Indice maestro.
Herramientas y Recursos
| Categoria | Nota | Uso |
|---|---|---|
| Repositorio de Amenazas | threat-intelligence-feeds | Bases de datos de IPs maliciosas |
| Data Leaks | data-breach-search-engines | Busqueda de IPs en filtraciones |
| Buscadores | general-search-engines | Shodan, Censys, etc. |
| WHOIS | domain-ip-research | Registro de propiedad de IPs |
| Informacion DNS | dns-tools | Resolucion y registros DNS |
| Rangos IP | domain-ip-research | Consulta de rangos y bloques IP |
| Blacklist-Blocklist | threat-intelligence-feeds | Verificacion de reputacion |
| BGP Seekers | bgp-seekers | Monitoreo de rutas BGP |
Casos de Uso
- Investigacion completa de una direccion IP sospechosa
- Atribucion de infraestructura de threat actors
- Analisis de superficie de ataque de una organizacion
Notas
- Seguir el flujo completo: WHOIS -> DNS -> Rangos IP -> BGP -> Blacklists
- Ver domain-ip-research para la investigacion complementaria de dominios
- Este indice es parte de la estructura principal de osint-references-master
Desde Inbox: Dominios
Importado desde
Inbox/Dominios.mddurante consolidacion bulk.
Dominios - Indice de Recursos de Investigacion de Dominios
Resumen
Indice maestro de recursos para la investigacion de dominios. Organiza las herramientas por categoria: amenazas, filtraciones, buscadores, WHOIS y DNS.
Categoria
Investigacion de infraestructura / Dominios / Indice maestro.
Herramientas y Recursos
| Categoria | Nota | Uso |
|---|---|---|
| Repositorio de Amenazas | threat-intelligence-feeds | Dominios maliciosos conocidos |
| Data Leaks | data-breach-search-engines | Dominios en filtraciones |
| Buscadores | general-search-engines | Busqueda de infraestructura |
| WHOIS | domain-ip-research | Registro de propiedad de dominios |
| Informacion DNS | dns-tools | Registros DNS del dominio |
Casos de Uso
- Investigacion completa de un dominio sospechoso
- Atribucion de infraestructura de campanas maliciosas
- Analisis de superficie de ataque
Notas
- Flujo tipico: WHOIS -> DNS -> Buscadores -> Data Leaks
- Ver domain-ip-research para la investigacion complementaria de IPs
- Ver web-history-capture para herramientas adicionales de investigacion web
- Ver domain-ip-research para herramientas de enumeracion
Desde Inbox: Enumeración o Toma de Control de Subdominios
Importado desde
Inbox/Enumeración o Toma de Control de Subdominios.mddurante consolidacion bulk.
Enumeración y Toma de Control de Subdominios — Herramientas
Resumen
Catálogo masivo de ~50 herramientas GitHub para pentesting de infraestructura web: enumeración de subdominios (subDomainsBrute, Sublist3r, Aquatone, Amass), fingerprinting web (WhatWeb, FingerPrint), escaneo de vulnerabilidades (XSS con DalFox/PwnXSS/DSXS, WAF bypass con WhatWaf), descubrimiento de directorios (dirsearch, DirBrute, wfuzz), análisis de infraestructura (bannerscan, domain_analyzer, cipherscan) y detección de CDN (whichCDN, xcdn). Cada entrada incluye enlace directo al repositorio y descripción breve.
Herramientas
https://github.com/lijiejie/subDomainsBrute - Herramienta clásica de enumeración de subdominios por lijiejie. 🔍🔒🌐
https://github.com/ring04h/wydomain - Una herramienta de enumeración de subdominios rápida y precisa por ringzero. 🏹🔍🎯
https://github.com/le4f/dnsmaper - Herramienta de enumeración de subdominios con registro de mapas. 🗺️🔍🌐
https://github.com/We5ter/GSDF - Enumeración de subdominios a través de la transparencia de certificados de Google. 🔍🔒🔍
https://github.com/mandatoryprogrammer/cloudflare_enum - Enumeración de subdominios a través de CloudFlare. ☁️🔍🌐
https://github.com/guelfoweb/knock - Escaneo de subdominios con Knock. 👊🔍🌐
https://github.com/exp-db/PythonPool/tree/master/Tools/DomainSeeker - Una herramienta de enumeración de subdominios de Python integrada. 🐍🔍🌐
https://github.com/code-scan/BroDomain - Encuentra subdominios relacionados. 👥🔍🌐
https://github.com/chuhades/dnsbrute - Una herramienta rápida de brute force de dominios. ⏩🔍🌐
https://github.com/yanxiu0614/subdomain3 - Una herramienta simple y rápida para forzar subdominios. 🔍🔍🌐
https://github.com/michenriksen/aquatone - Una poderosa herramienta de subdominios y detección de toma de control de dominios. 🔍🔍🚩
https://github.com/evilsocket/dnssearch - Una herramienta de enumeración de subdominios. 🔍🌐
https://github.com/reconned/domained - Herramientas de enumeración de subdominios para la caza de errores. 🔍🎯🌐
https://github.com/bit4woo/Teemo - Una herramienta de colección de nombres de dominio y direcciones de correo electrónico. 📧🔍🌐
https://github.com/laramies/theHarvester - Herramienta de recolección de correos electrónicos, subdominios y nombres de personas. 📧🔍🌐
https://github.com/nmalcolm/Inventus - Una araña diseñada para encontrar subdominios de un dominio específico rastreándolo. 🕷️🔍🌐
https://github.com/aboul3la/Sublist3r - Herramienta rápida de enumeración de subdominios para probadores de penetración. 🔍🔍🌐
https://github.com/jonluca/Anubis - Herramienta de enumeración y recopilación de información de subdominios. 🔍📈🌐
🔍 https://github.com/urbanadventurer/whatweb - Identificador de huellas digitales de sitios web 🕵️♂️
🔍 https://github.com/tanjiti/FingerPrint - Otro identificador de huellas digitales de sitios web 🕵️♂️
🔍 https://github.com/nanshihui/Scan-T - Un nuevo rastreador basado en Python con más funciones, incluida la búsqueda de huellas digitales de red 🌐
🔍 https://github.com/OffensivePython/Nscan - Escáner rápido de Internet en toda la red 🌐
🔍 https://github.com/ywolf/F-NAScan - Script para escanear información de activos de red 🕵️♂️
🔍 https://github.com/maurosoria/dirsearch - Escáner de rutas web 🛣️
🔍 https://github.com/x0day/bannerscan - Escáner de banners de red con rutas 📟
🔍 https://github.com/RASSec/RASscan - Escáner interno de puertos y servicios de red 🌐
🔍 https://github.com/3xp10it/bypass_waf - Herramienta de omisión automática de WAF 🛡️
🔍 https://github.com/3xp10it/xcdn - Intenta encontrar la dirección IP real detrás de CDN 🌐
🔍 https://github.com/Xyntax/BingC - Consulta C / lado detenido basada en el motor de búsqueda Bing, con soporte para API 🕵️♂️
🔍 https://github.com/Xyntax/DirBrute - Herramienta de enumeración de directorios web de múltiples hilos 🌐
🔍 https://github.com/zer0h/httpscan - Detector de servicios HTTP con rastreador de IP/CIDR 🚀
🔍 https://github.com/lietdai/doom - Escáner de vulnerabilidades de puertos IP distribuidos basado en Thorn 🌐
🔍 https://github.com/chichou/grab.js - Herramienta rápida de captura de banners TCP, similar a zgrab pero compatible con muchos más protocolos 📟
🔍 https://github.com/Nitr4x/whichCDN - Detecta si un sitio web dado está protegido por una CDN 🛡️
🔍 https://github.com/secfree/bcrpscan - Escáner de rutas web basado en resultados de rastreo 🌐
🔍 https://github.com/mozilla/ssh_scan - Prototipo de escáner de configuración y políticas SSH 📡
🔍 https://github.com/18F/domain-scan - Escanea dominios para obtener datos sobre su configuración de HTTPS y otras cosas diversas 🌐
🔍 https://github.com/ggusoft/inforfinder - Herramienta para recopilar información de cualquier dominio que apunte a un servidor e identificador de huellas digitales 🕵️♂️
🔍 https://github.com/boy-hack/gwhatweb - Identificador de huellas digitales para CMS 🕵️♂️
🔍 https://github.com/Mosuan/FileScan - Escáner de archivos sensibles 📁
🔍 https://github.com/Xyntax/FileSensor - Herramienta de detección de archivos dinámicos basada en rastreador 🚀
🔍 https://github.com/deibit/cansina - Herramienta de descubrimiento de contenido web 🌐
🔍 https://github.com/mozilla/cipherscan - Una forma muy simple de averiguar qué suites de cifrado SSL son compatibles con un objetivo 📟
🔍 https://github.com/xmendez/wfuzz - Marco de trabajo de aplicación web y escáner de contenido web 🌐
🔍 https://github.com/s0md3v/Breacher - Un buscador de paneles de administración avanzado y multihilo escrito en Python 🛡️
🔍 https://github.com/ztgrace/changeme - Un escáner de credenciales predeterminadas 🗝️
🔍 https://github.com/medbenali/CyberScan - Una herramienta de pruebas de penetración de código abierto que puede analizar paquetes, decodificar, escanear puertos, hacer ping y geolocalizar una IP 🌐
🔍 https://github.com/m0nad/HellRaiser - Escanea HellRaiser con nmap y correlaciona los cpe encontrados con cve-search para enumerar vulnerabilidades 🕵️♂️
🔍 https://github.com/scipag/vulscan - Escaneo avanzado de vulnerabilidades con Nmap NSE 🚀
🔍 https://github.com/jekyc/wig - Herramienta de recopilación de información de aplicaciones web 🌐
🔍 https://github.com/eldraco/domain_analyzer - Analiza la seguridad de cualquier dominio encontrando toda la información posible 🕵️♂️
🔍 https://github.com/cloudtracer/paskto - Escáner de directorios pasivo y rastreador web basado en la base de datos de Nikto 🌐
🔍 https://github.com/zerokeeper/WebEye - Un identificador de servicios web y WAF 🕵️♂️
🔍 https://github.com/m3liot/shcheck - Verifica solo las cabeceras de seguridad en un sitio web objetivo 🛡️
🔍 https://github.com/aipengjie/sensitivefilescan - Un escáner de archivos sensibles rápido e impresionante 📁
🔍 https://github.com/fnk0c/cangibrina - Un buscador de paneles (admin) rápido y poderoso 🚀
🔍 https://github.com/n4xh4ck5/CMSsc4n - Herramienta para identificar si un dominio es un CMS como WordPress, Moodle, Joomla 📦
🔍 https://github.com/Ekultek/WhatWaf - Detecta y omite firewalls de aplicaciones web y sistemas de protección 🛡️
🔍 https://github.com/dzonerzy/goWAPT - Herramienta de prueba de penetración de aplicaciones web Go y herramienta de prueba de aplicaciones web 🌐
🔍 https://github.com/blackye/webdirdig - Escáner de archivos sensibles 📁
🔍 https://github.com/boy-hack/w8fuckcdn - Obtén la dirección IP real del sitio web escaneando toda la red 🌐
https://github.com/stamparm/DSXS - Un escáner completamente funcional de vulnerabilidad de cross-site scripting, compatible con parámetros GET y POST, y escrito en menos de 100 líneas de código 🏴☠️
🔍 https://github.com/fcavallarin/domdig - Escáner de DOM XSS para aplicaciones de página única 🕷️
🔍 https://github.com/lwzSoviet/NoXss - Escáner de XSS reflejado y DOM-XSS más rápido basado en Phantomjs 🎭
🔍 https://github.com/pwn0sec/PwnXSS - Un potente escáner de XSS hecho en Python 3.7 🚀
🔍 https://github.com/hahwul/dalfox - Herramienta de análisis de parámetros y escaneo de XSS basada en golang 🎯
Desde Inbox: Rangos IP
Importado desde
Inbox/Rangos IP.mddurante consolidacion bulk.
Herramientas de Consulta de Rangos IP y Dominios
Resumen
Herramientas para consultar rangos de direcciones IP, asignaciones de bloques CIDR y relaciones entre IPs y dominios. Esenciales para mapear la infraestructura de un objetivo.
Categoria
Rangos IP / Registro de IPs / Inteligencia de infraestructura.
Herramientas y Recursos
| Herramienta | Enlace | Descripcion |
|---|---|---|
| RIPE Database | RIPE | Base de datos del registro europeo de IPs y ASNs |
| DomainTools | DomainTools | Plataforma de inteligencia de dominios e IPs |
| VirusTotal | VirusTotal | Analisis multimotor de IPs, dominios y ficheros |
Casos de Uso
- Consultar a que organizacion pertenece un rango de IPs
- Identificar todos los dominios alojados en un rango IP
- Mapear la infraestructura de red de un objetivo
- Correlacionar IPs con dominios maliciosos
Notas
- RIPE cubre Europa, Oriente Medio y Asia Central; para otras regiones usar ARIN, APNIC, LACNIC o AFRINIC
- Ver domain-ip-research para consultas WHOIS de dominios
- Ver domain-ip-research para herramientas de geolocalizacion de IPs
- Ver bgp-seekers para consultas de enrutamiento BGP
Desde Inbox: WHOIS
Importado desde
Inbox/WHOIS.mddurante consolidacion bulk.
WHOIS - Herramientas de Consulta WHOIS y Registro de Dominios
Resumen
Herramientas para consultar registros WHOIS de dominios: informacion de registrante, fechas de registro, servidores DNS y datos de contacto. Fundamentales en cualquier investigacion de infraestructura.
Categoria
Consulta WHOIS / Registro de dominios / Inteligencia de infraestructura.
Herramientas y Recursos
| Herramienta | Enlace | Descripcion |
|---|---|---|
| who.is | who.is | Consulta WHOIS con interfaz limpia y datos completos |
| DomainTools | DomainTools | Plataforma completa de inteligencia WHOIS e historico |
| HackerTarget WHOIS | HackerTarget | Consulta WHOIS gratuita de HackerTarget |
| VirusTotal | VirusTotal | Analisis multimotor que incluye datos WHOIS |
| Domain Dossier | CentralOps | Dossier completo de dominio: WHOIS, DNS, traceroute |
Casos de Uso
- Obtener datos de registro de un dominio sospechoso
- Identificar al registrante de un dominio (cuando no hay privacy)
- Verificar fechas de creacion y expiracion de dominios
- Correlacionar dominios por datos compartidos de registrante
Notas
- DomainTools ofrece el mejor historico de WHOIS (WHOIS history)
- Muchos dominios usan servicios de privacidad que ocultan datos del registrante
- Domain Dossier de CentralOps ofrece el informe mas completo en una sola consulta
- Ver web-history-capture para herramientas de investigacion de sitios web
- Ver domain-ip-research para consulta de bloques IP asociados