first commit

This commit is contained in:
2025-11-21 17:17:42 +01:00
commit 4cad18c2a5
285 changed files with 122106 additions and 0 deletions
+27
View File
@@ -0,0 +1,27 @@
- [Chaos](https://chaos.projectdiscovery.io/#/)
- Priority #1 - you *must* have this
- Actively curated and maintained internet assets database
- [Github](https://github.com/settings/tokens)
- [FacebookCT](https://develpers.facebook.com)
1. Open https://developers.facebook.com and Sign in as a facebook (developer)
2. Go to apps, create app
3. Create app > Your app page
4. Get apikey
5. setting > advance setting > security > client token
6. Get Secret
- [PassiveTotal](https://community.riskiq.com/settings)
- Shodan (not free but very cheap)
- Paid/Limited sources
- Rapid7 Sonar
- SecurityTrails - best paid API
- SpiderFootHX - second best paid API
- binaryedge
- builtwith
- c99
- censys
- fullhunt
- hunterio
- virustotal
- zoomeye
@@ -0,0 +1,101 @@
- Scraping
- Tons of databases and data projects exist to catalogue related URLs and domains
- Google Dorking
- Google a domain, then progressively subtract known subdomains
1. site:twitch.tv -www.twitch.tv
2. site:twitch.tv -www.twitch.tv -watch.twitch.tv
3. site:twitch.tv -www.twitch.tv -watch.twitch.tv -dev.twitch.tv
4. ...
- [Amass](https://github.com/caffix/amass)
- Will automatically extract subdomain data from tons of sources and optionally brute force subdomains as well.
- Also groups scraped domains to ASNs, owners, and IP ranges
- Make sure to review the [API Keys](obsidian://open?vault=Necronomicon&file=Necronomicon%2FOSINT%2FAPI%20Keys) page to make your Amass as much as it can be
- `amass enum list`
- `amass enum -list | grep -v "\*"`
- Put the keys in `~/.config/amass/config.ini`
- [Subfinder](https://github.com/subfinder)
- Similar to Amass - use both and concat | uniq the output
- [BBOT](https://github.com/blacklanternsecurity/bbot)
- Huge tool with subdomain scraping, brute force, web spidering, and more.
- The output is a file at `/root/.bbot/scans/{scan_name}/`
- `cat /root/.bbot/scans/{scan_name}/output.txt | grep -F '[DNS_NAME] | awk '{print $2}'`
- Subdomain brute force
- Very slow - try using threaded tools that will use multiple DNS resolvers
- [PureDNS](https://github.com/d3mondev/puredns)
- Wrapper around [MassDNS](https://github.com/blechschmidt/massdns) and adds features
- `puredns bruteforce <subdomain_list> tesla.com -r resolvers.txt`
- DNS resolvers: https://github.com/trickest/resolvers
- Permutation/Alteration scanning - predict other subdomain names based on patterns
- [altdns](https://github.com/infosec-au/altdns) - generate permutations, but doesn't attempt to resolve. Use with PureDNS
- [dnsgen](https://github.com/ProjectAnte/dnsgen.git) - generate permutations, but doesn't attempt to resolve. Use with PureDNS
- `cat <file_of_subdomains.txt> | dnsgen - | puredns resolve --resolvers resolvers.txt`
- Shodan
- [Shosubgo](https://github.com/incogbyte/shosubgo)
- `go run main.go -d <target_domain>`
- Shodan from CLI is better for large targets - NahamSec has a great video on this and parsing output
- [NahamSec - Asset Discovery Using Shodan](https://www.youtube.com/watch?v=4CL_8GRNVTE)
- Acquisitions
- [Crunchbase](https://www.crunchbase.com/)
- Business information about acquisitions and mergers - new apex domains that belong to your target for enumeration, phishing, etc.
- Companies often don't force newly acquired companies to change to their infrastructure immediately.
- Also gives:
- information on company leadership and employees - even past employees
- Tech stack info
- Annual revenue
- Events
- Recent news
- Other fantastic contextual data
- [OCCRP](https://aleph.occrp.org)
- global archive of research material for investigative reporting. They keep track of 414 million public entities and parse over 252 discrete datasets in more than 141 countries.
- When searching for a company, find the entry that comes up, closely related to your company and associated with the dataset "US SEC CorpWatch.“
- Look for one with a substantial list of assets
- Provides a list of acquisitions and investments by your target
- Reverse WHOIS
- The purpose of this is to search WHOIS data to hopefully find other apex domains owned by the target.
- For example, searching WHOIS data for the "Organization Name" or "Registrant Email" of the target
- https://whoxy.com - cheapest place for access to reverse WHOIS and WHOIS data in general.
- API - 1000 queries for $10
- `https://api.whoxy.com/?key=xxxxx&reverse=whois&keyword=google&mode=domains`
- Using AI for recon
- *Current dataset cuts off in 2021; all results should be rigorously verified*
- Acquisitions
- "What can you tell me about Tesla's acquisitions?"
- Subdomains
- [SubreconGPT](https://github.com/jhaddix/SubreconGPT)
- Script that accepts a list of subdomains and for each one, it will have GPT4 guess similar/related subdomains and check whether they resolve
- Linked Discovery
- This essentially involves spidering pages at the known domains of the target to discover more related domains.
- BurpSuite:
1. Turn off passive scanning
2. Set forms auto to submit (if youre feeling frisky)
3. Set scope to advanced control and use “keyword” of target name (not a normal FQDN)
4. Walk+browse main site, then spider all hosts recursively!
5. Profit
- To export the found domains/subdomains:
1. Select all hosts in the site tree
2. In PRO ONLY right click the selected hosts
3. Go to “Engagement Tools” -> “Analyze target”
4. Save report as an html file
5. Copy the hosts from the “Target” section
- [GoSpider](https://github.com/jaeles-project/gospider)
- [hakrawler](https://github.com/hakluke/hakrawler)
- Ad & Analytics
- You can also glean related domains and subdomains by looking at a targets ad/analytics tracker codes. Many sites use the same codes across all their domains. Google analytics and New Relic codes are the most common.
- [BuiltWith](https://builtwith.com/)
- Example: https://builtwith.com/relationships/twitch.tv
- [getrelationship.py](https://raw.githubusercontent.com/ m4ll0k/Bug-Bounty- Toolz/master/getrelationship.py)
- Will search BuiltWith from the command line with the help of your session token.
- Discover cloud endpoints behind Cloudflare, Akamai, etc.
- Pull CNAME records from domains
- `getent hosts <domain>`
- Analyze public IPs and cross-reference with IP ranges of various services like AWS
- [DNSCharts](https://dnscharts.hacklikeapornstar.com/)
-
@@ -0,0 +1,12 @@
- Keeping a list of assets for a large company can be difficult and overwhelming.
- [bountycatch.py](https://gist.github.com/jhaddix/91035a01168902e8130a8e1bb383ae1e)
- Python3 and Redis
- Start a project called "dell" and add list of subdomains:
- `python3 bountycatch.py --project dell --file dell.txt`
- Print the current project:
- `python3 bountycatch.py --project dell -o print`
- Add new subdomains to project:
- `python3 bountycatch.py --project dell -o add -f githubdell8.txt`
- [BBRF](https://github.com/honoki/bbrf-client)
- GUI tool for managing recon data
-
+33
View File
@@ -0,0 +1,33 @@
- Finding org assets in the cloud can be a daunting task.
- SSL Certificate Enumeration
- SSL certificates often have other domains on them as Subject Alternative Names (SANs); these may be other external apex domains, subdomains, or even internal domains
- [kaeferjaeger.gay](https://kaeferjaeger.gay)
- Hacker collective that scans all major cloud providers every month and catalogues the SSL certificate information into a downloadable database
- https://kaeferjaeger.gay/?dir=sni-ip-ranges
- This data is not formatted; some BASH is needed:
- `cat *.txt | grep -F ".<target_domain>" | awk -F'-- ' '{print $2}'| tr ' ' '\n' | tr '[' ' | sed 's/ //| sed 's/\]//| grep -F ".<target_domain>“ | sort -u`
- S3 Buckets
- https://buckets.grayhatwarfare.com/
- Paid, but limited free results
- Loop though subdomains looking for s3 buckets
- `while read p; do echo $p, $(curl --silent -I -i https://$p | grep AmazonS3); done`
- You'll need the bucket name (not just the URL) to interact with buckets using AWS CLI; you can get them from the CNAME records of the bucket URLs.
- AWS CLI
- `aws s3api list-objects-v2 --bucket <bucket_name> > list_objects.txt`
- Get a total number of objects:
- `grep '"Key"' list_objects.txt |wc -l`
- List filenames:
- `grep '"Key"' list_objects | sed 's/[",]//g' > list_keys.txt`
- Search for certain file types:
1. `patterns='\.sh$|\.sql$|\.tar\.gz$\.properties$|\.config$|\.tgz$'`
2. `egrep $patterns list_keys.txt`
3. `egrep -v\ "\.jpg|\.png|\.js|\.woff|/\",$|\.css|\.gif|\.svg|\.ttf|\.eot" list_keys.xt`
- Download object by key
- `aws s3api get-object --bucket <bucket_name> --key <key> <output_filename>`
- Resources
- http://flaws.cloud/
- http://flaws2.cloud/
- https://google.github.io/kctf/
+38
View File
@@ -0,0 +1,38 @@
- Research
- [Better Business Bureau](https://www.bbb.org/)
- [Bloomberg](https://www.bloomberg.com/research/company/overview/overview.asp)
- [Business Source](https://www.ebscohost.com/academic/business-source-complete)
- [Bureau Van Dijk](https://www.bvdinfo.com/)
- [Canadian Business Research](https://www.canada.ca/en/services/business/research.html)
- [Central and Eastern European Business Directory](https://www.ceebd.co.uk/ceebd)
- [Company Registration Round the World](https://www.commercial-register.sg.ch/home/worldwide.html)
- [Company Research Resources by Country Comparably](https://www.comparably.com/)
- [CompeteShark](https://competeshark.com/)
- [Corporate Information](https://www.corporateinformation.com/)
- [CrunchBase](https://www.crunchbase.com/)
- [Europages](https://www.europages.co.uk/)
- [European Business Register](https://www.ebr.org/)
- [Ezilon](https://www.ezilon.com/)
- [Factiva](https://global.factiva.com/)
- [Glassdoor](https://www.glassdoor.com/)
- [globalEdge](https://globaledge.msu.edu/)
- [GuideStar](https://www.guidestar.org/)
- [Hoovers](https://www.hoovers.com/)
- [Inc. 5000](https://www.inc.com/inc5000)
- [iSpionage](https://www.ispionage.com/)
- [Knowledge guide to international company registration](https://www.icaew.com/en/library/subject-gateways/business-management/company-administration/knowledge-guide-international-company-registration)
- [Linkedin](https://www.linkedin.com/)
- [National Company Registers](https://en.wikipedia.org/wiki/List_of_company_registers)
- [Mergent Intellect](https://www.mergentintellect.com/)
- [Mergent Online](https://www.mergentonline.com/login.php)
- [Notablist](https://www.notablist.com/)
- [Orbis directory](https://orbisdirectory.bvdinfo.com/version-20161014/OrbisDirectory/Companies)
- [opencorporates](https://opencorporates.com/)
- [Owler](https://www.owler.com/)
- [Overseas Company Registers](https://www.gov.uk/government/publications/overseas-registries/overseas-registries)
- [Scoot](https://www.scoot.co.uk/)
- [SEMrush](https://www.semrush.com/)
- [Serpstat](https://serpstat.com/)
- [Forbes Global 2000](https://www.forbes.com/global2000/)
- [Vault](https://www.vault.com/)
- [Xing](https://www.xing.com/)
+5
View File
@@ -0,0 +1,5 @@
- Tools
- [Ahmia](https://ahmia.fi/)
- [OnionLink](https://onion.link/)
- [List of 30 unusual Web search engines](https://www.deepwebsiteslinks.com/page/2/)
- [Quora list of unusual Web sites](https://www.quora.com/What-are-some-cool-dark-web-websites/)
+48
View File
@@ -0,0 +1,48 @@
- Research
- [Accuranker](https://www.accuranker.com/)
- [ahrefs](https://ahrefs.com/)
- [Bing Webmaster Tools](https://www.bing.com/toolbox/webmaster)
- [Central Ops](https://centralops.net/)
- [DNSDumpster](https://dnsdumpster.com/)
- [DNSStuff](https://www.dnsstuff.com/)
- [DNS Trail](https://dnstrails.com/)
- [DNSViz](https://dnsviz.net/)
- [Domain Big Data](https://domainbigdata.com/)
- [Domain Dossier](https://centralops.net/co/DomainDossier.aspx)
- [Domain Tools](https://whois.domaintools.com/)
- [Easy whois](https://www.easywhois.com/)
- [Follow.net](https://follow.net/)
- [GraphyStories](https://app.graphystories.com/)
- [Infosniper](https://www.infosniper.net/)
- [intoDNS](https://www.intodns.com/)
- [IP Location](https://www.iplocation.net/)
- [IPFingerprints](https://www.ipfingerprints.com/)
- [IPVoid](https://www.ipvoid.com/)
- [NetworkTools](https://network-tools.com/)
- [Majestic](https://majestic.com/)
- [Netcraft Site Report](https://toolbar.netcraft.com/site_report?url=undefined#last_reboot)
- [OpenLinkProfiler](https://www.openlinkprofiler.org/ratelimit/domain.com)
- [Open Site Explorer](https://moz.com/researchtools/ose)
- [Pentest-Tools.com](https://pentest-tools.com/information-gathering/google-hacking)
- [Quick Sprout](https://www.quicksprout.com/)
- [RedirectDetective](https://redirectdetective.com/)
- [Remote DNS Lookup](https://remote.12dt.com/)
- [Robtex](https://www.robtex.com/)
- [SEMrush](https://www.semrush.com/)
- [SEOTools for Excel](https://seotoolsforexcel.com/)
- [Similar Web](https://www.similarweb.com/)
- [StatsCrop](https://www.statscrop.com/)
- [TCPIPUTILS.com](https://www.tcpiputils.com/)
- [URLVoid](https://www.urlvoid.com/)
- [WebMeUp](https://webmeup.com/)
- [Website Informer](https://website.informer.com/)
- [WhatIsMyIPAddress](https://whatismyipaddress.com/)
- [Who.is](https://who.is/)
- [Whois Arin Online](https://whois.arin.net/)
- [WhoIsHostingThis](https://www.whoishostingthis.com/)
- [Whoisology](https://whoisology.com/)
- [WhoIsRequest](https://whoisrequest.com/)
- [w3snoop](https://webboar.com.w3snoop.com/)
- [Verisign](https://dnssec-debugger.verisignlabs.com/)
- [ViewDNS.info](https://viewdns.info/)
- [You Get Signal](https://www.yougetsignal.com/)
+40
View File
@@ -0,0 +1,40 @@
- Determine which email provider an org is using
- `dig +short <email_domain> MX`0
- Send spoofed email
- [Emkei's Mailer](https://emkei.cz/)
- Management
- [ActiveInbox](https://www.activeinboxhq.com/)
- [AutoHotkey](https://www.autohotkey.com/)
- [Batched Inbox](https://www.batchedinbox.com/)
- [Block Sender](https://chrome.google.com/webstore/detail/block-sender/bklnjbfcmglhiaoppcckdodanccbelcg)
- [Boomerang Mail](https://www.boomeranggmail.com/)
- [ClearContext](https://www.clearcontext.com/)
- [Cleanfox](https://www.cleanfox.io/)
- [CloudMagic](https://cloudmagic.com/)
- [FindBigMail](https://www.findbigmail.com/)
- [Followupthen](https://www.followupthen.com/)
- [Hiver](https://hiverhq.com/)
- [Integrated gmail](https://addons.mozilla.org/en-US/firefox/addon/integrated-gmail)
- [Mailstore](https://www.mailstore.com/)
- [Hubspotsales](https://chrome.google.com/webstore/detail/hubspot-sales/oiiaigjnkhngdbnoookogelabohpglmd?hl=en)
- [Minimalist](https://chrome.google.com/webstore/detail/minimalist-for-everything/bmihblnpomgpjkfddepdpdafhhepdbek)
- [NudgeMail](https://www.nudgemail.com/)
- [Sanebox](https://www.sanebox.com/)
- [Send for Gmail](https://chrome.google.com/webstore/detail/send-from-gmail-by-google/pgphcomnlaojlmmcjmiddhdapjpbgeoc)
- [Sortd](https://www.sortd.com/)
- [Ugly Email](https://uglyemail.com/)
- [Wisestamp](https://chrome.google.com/webstore/detail/wisestamp-email-signature/pbcgnkmbeodkmiijjfnliicelkjfcldg)
- Email Tools
- [Email Address Validator](https://www.email-validator.net/)
- [Email Format](https://email-format.com/)
- [EmailHippo](https://tools.verifyemailaddress.io/)
- [Email Hunter](https://emailhunter.co/)
- [Have I Been Pwned](https://haveibeenpwned.com/)
- [MailTester](https://mailtester.com/testmail.php)
- [Pipl](https://pipl.com/)
- [TCIPUTILS.com Email Test](https://www.tcpiputils.com/email-test)
- [ThatsThem](https://thatsthem.com/reverse-email-lookup)
- [Verify Email](https://verify-email.org/)
- [VoilaNorbert](https://www.voilanorbert.com/)
@@ -0,0 +1,142 @@
- Most tools designed to scan Github are targetted at a single repo or organization. This is the opposite of what a red teamer wants: they want to scour *all* repos, including (especially) private repos, for information related to the target organization
- [github-subdomains](https://github.com/gwen001/github-subdomains.git)
- Scrapes Github for any subdomains of the target.
- You'll need many API keys and many runs to complete this method
- Github Dorking
- [Gdorklinks.sh](https://gist.github.com/jhaddix/1fb7ab2409ab579178d2a79959909b33#file-gdorklinks-sh)
- Hugely useful Haddix script to auto-generate Github dorking links
- Usage:
1. download the script
2. `chmod +x Gdorklinks.sh`
3. `./Gdorklinks.sh NameOfSomeCompanyMaybe`
4. Paste links into browser
- Useful queries:
- `org:<org_name> password`
- `org:<org_name> aws_secret_access_key`
- `org:<org_name> aws_key`
- `org:<org_name> BEGIN RSA PRIVATE KEY`
- `org:<org_name> BEGIN OPENSSH PRIVATE KEY`
- `org:<org_name> secret_key`
- `org:<org_name> hooks.slack.com/services`
- `org:<org_name> sshpass -p`
- `org:<org_name> sq0csp`
- `org:<org_name> apps.googleusercontent.com`
- `org:<org_name> extension:pem key`
- Searching Repos for Sensitive Info:
1. Download all repos:
- `while read p; do git clone www.github.com/<org_name>/$p; done`
2. Use the "Useful Grep Regexes" page included in the Necronomicon to search:
- `egrep -Ri -f regex_patterns.txt *`
3. Search past commits:
- `git rev-list --all | xargs git grep "BEGIN [EC|RSA|DSA|OPENSSH] PRIVATE KEY"`
- `git rev-list --all | xargs git grep "aws_secret"`
- [github-search](https://github.com/gwen001/github-search)
- [@th3g3ntelman's "Github and Sensitive Data Exposure"](https://www.youtube.com/watch?v=l0YsEk_59fQ)
- Internal packages and libraries
- Companies often create internal libraries and packages, some of which accidentally get published
- Check for archival: https://www.skypack.dev/
- List npm contributors that have access to modify a package:
- `npm owner ls <package_name>`
```BASH
#!/bin/bash
without_suffix=`echo $1|cut -d . -f1`
echo ""
echo "************ Github Dork Links (must be logged in) *******************"
echo " password"
echo "https://github.com/search?q=%22$1%22+password&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+password&type=Code"
echo " npmrc _auth"
echo "https://github.com/search?q=%22$1%22+npmrc%20_auth&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+npmrc%20_auth&type=Code"
echo " dockercfg"
echo "https://github.com/search?q=%22$1%22+dockercfg&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+dockercfg&type=Code"
echo " pem private"
echo "https://github.com/search?q=%22$1%22+pem%20private&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+extension:pem%20private&type=Code"
echo " id_rsa"
echo "https://github.com/search?q=%22$1%22+id_rsa&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+id_rsa&type=Code"
echo " aws_access_key_id"
echo "https://github.com/search?q=%22$1%22+aws_access_key_id&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+aws_access_key_id&type=Code"
echo " s3cfg"
echo "https://github.com/search?q=%22$1%22+s3cfg&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+s3cfg&type=Code"
echo " htpasswd"
echo "https://github.com/search?q=%22$1%22+htpasswd&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+htpasswd&type=Code"
echo " git-credentials"
echo "https://github.com/search?q=%22$1%22+git-credentials&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+git-credentials&type=Code"
echo " bashrc password"
echo "https://github.com/search?q=%22$1%22+bashrc%20password&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+bashrc%20password&type=Code"
echo " sshd_config"
echo "https://github.com/search?q=%22$1%22+sshd_config&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+sshd_config&type=Code"
echo " xoxp OR xoxb OR xoxa"
echo "https://github.com/search?q=%22$1%22+xoxp%20OR%20xoxb%20OR%20xoxa&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+xoxp%20OR%20xoxb&type=Code"
echo " SECRET_KEY"
echo "https://github.com/search?q=%22$1%22+SECRET_KEY&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+SECRET_KEY&type=Code"
echo " client_secret"
echo "https://github.com/search?q=%22$1%22+client_secret&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+client_secret&type=Code"
echo " sshd_config"
echo "https://github.com/search?q=%22$1%22+sshd_config&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+sshd_config&type=Code"
echo " github_token"
echo "https://github.com/search?q=%22$1%22+github_token&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+github_token&type=Code"
echo " api_key"
echo "https://github.com/search?q=%22$1%22+api_key&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+api_key&type=Code"
echo " FTP"
echo "https://github.com/search?q=%22$1%22+FTP&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+FTP&type=Code"
echo " app_secret"
echo "https://github.com/search?q=%22$1%22+app_secret&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+app_secret&type=Code"
echo " passwd"
echo "https://github.com/search?q=%22$1%22+passwd&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+passwd&type=Code"
echo " s3.yml"
echo "https://github.com/search?q=%22$1%22+.env&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+.env&type=Code"
echo " .exs"
echo "https://github.com/search?q=%22$1%22+.exs&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+.exs&type=Code"
echo " beanstalkd.yml"
echo "https://github.com/search?q=%22$1%22+beanstalkd.yml&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+beanstalkd.yml&type=Code"
echo " deploy.rake"
echo "https://github.com/search?q=%22$1%22+deploy.rake&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+deploy.rake&type=Code"
echo " mysql"
echo "https://github.com/search?q=%22$1%22+mysql&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+mysql&type=Code"
echo " credentials"
echo "https://github.com/search?q=%22$1%22+credentials&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+credentials&type=Code"
echo " PWD"
echo "https://github.com/search?q=%22$1%22+PWD&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+PWD&type=Code"
echo " deploy.rake"
echo "https://github.com/search?q=%22$1%22+deploy.rake&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+deploy.rake&type=Code"
echo " .bash_history"
echo "https://github.com/search?q=%22$1%22+.bash_history&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+.bash_history&type=Code"
echo " .sls"
echo "https://github.com/search?q=%22$1%22+.sls&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+PWD&type=Code"
echo " secrets"
echo "https://github.com/search?q=%22$1%22+secrets&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+secrets&type=Code"
echo " composer.json"
echo "https://github.com/search?q=%22$1%22+composer.json&type=Code"
echo "https://github.com/search?q=%22$without_suffix%22+composer.json&type=Code"
```
@@ -0,0 +1,75 @@
```
^.*_rsa$
^.*_dsa$
^.*_ed25519$
^.*_ecdsa$
\.?ssh/config$
^key(pair)?$
^\.?(bash_|zsh_|sh_|z)?history$
^\.?mysql_history$
^\.?psql_history$
^\.?pgpass$
^\.?irb_history$
\.?purple/accounts\.xml$
\.?xchat2?/servlist_?\.conf$
\.?irssi/config$
\.?recon-ng/keys\.db$
^\.?dbeaver-data-sources.xml$
^\.?muttrc$
^\.?s3cfg$
\.?aws/credentials$
^sftp-config(\.json)?$
^\.?trc$
^\.?(bash|zsh|csh)rc$
^\.?(bash_|zsh_)?profile$
^\.?(bash_|zsh_)?aliases$
config(\.inc)?\.php$
^key(store|ring)$
^kdbx?$
^sql(dump)?$
^\.?htpasswd$
^(\.|_)?netrc$
\.?gem/credentials$
^\.?tugboat$
doctl/config.yaml$
^\.?git-credentials$
config/hub$
^\.?gitconfig$
\.?chef/(.*)\.pem$
etc/shadow$
etc/passwd$
^\.?dockercfg$
^\.?npmrc$
^\.?env$
-----BEGIN [EC|RSA|DSA|OPENSSH] PRIVATE KEY----
(A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}
(("|'|`)?((?i)aws)?_?((?i)access)_?((?i)key)?_?((?i)id)?("|'|`)?\\\\s{0,50}(:|=>|=)\\\\s{0,50}("|'|`)?(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}("|'|`)?)
(("|'|`)?((?i)aws)?_?((?i)account)_?((?i)id)?("|'|`)?\\\\s{0,50}(:|=>|=)\\\\s{0,50}("|'|`)?[0-9]{4}-?[0-9]{4}-?[0-9]{4}("|'|`)?)
(("|'|`)?((?i)aws)?_?((?i)secret)_?((?i)access)?_?((?i)key)?_?((?i)id)?("|'|`)?\\\\s{0,50}(:|=>|=)\\\\s{0,50}("|'|`)?[A-Za-z0-9/+=]{40}("|'|`)?)
(("|'|`)?((?i)aws)?_?((?i)session)?_?((?i)token)?("|'|`)?\\\\s{0,50}(:|=>|=)\\\\s{0,50}("|'|`)?[A-Za-z0-9/+=]{16,}("|'|`)?)
(?i)artifactory.{0,50}("|'|`)?[a-zA-Z0-9=]{112}("|'|`)?
(?i)codeclima.{0,50}("|'|`)?[0-9a-f]{64}("|'|`)?
EAACEdEose0cBA[0-9A-Za-z]+
(("|'|`)?type("|'|`)?\\\\s{0,50}(:|=>|=)\\\\s{0,50}("|'|`)?service_account("|'|`)?,?)
(?:r|s)k_[live|test]_[0-9a-zA-Z]{24}
[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com
AIza[0-9A-Za-z\\-_]{35}
ya29\\.[0-9A-Za-z\\-_]+
sk_[live|test]_[0-9a-z]{32}
sq0atp-[0-9A-Za-z\-_]{22}
sq0csp-[0-9A-Za-z\-_]{43}
access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}
amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}
SK[0-9a-fA-F]{32}
key-[0-9a-zA-Z]{32}
[0-9a-f]{32}-us[0-9]{12}
sshpass -p.*['|"]
(https\\://outlook\\.office.com/webhook/[0-9a-f-]{36}\\@)
(?i)sauce.{0,50}("|'|`)?[0-9a-f-]{36}("|'|`)?
(xox[pboa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})
https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}
(?i)sonar.{0,50}("|'|`)?[0-9a-f]{40}("|'|`)?
(?i)hockey.{0,50}("|'|`)?[0-9a-f]{32}("|'|`)?
([\w+]{1,24})(://)([^$<]{1})([^\s";]{1,}):([^$<]{1})([^\s";]{1,})@[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-zA-Z0-9()]{1,24}([^\s]+)
oy2[a-z0-9]{43}
```
+39
View File
@@ -0,0 +1,39 @@
- Search specific website
- `site:"linkedin.com" "<company name>"`
- `site:s3.amazonaws.com COMPANY_NAME`
- Look for string in URL
- `inurl:"/course/jumpto.php" site:example.com`
- Find string in page title
- `intitle:"index of" site:example.com`
- Find pages that contain links to a certain page
- `link:"https:// en.wikipedia.org/wiki/ReDoS"`
- Find pages with a specific file extension
- `filetype:log site:example.com`
- `site:example.com ext:php`
- `site:example.com ext:txt password`
- Wildcards - match any character or series of characters in string
- `how to hack * using Google`
- Force an exact match to a string - use quotes
- `"how to hack"`
- "OR" operator - match pages with either one of two criteria
- `"how to hack" site:(reddit.com | stackoverflow.com)`
- `(SQL Injection | SQLi)`
- Minus operator - exclude certain search results
- `"how to hack websites" -php`
- Trademark, Terms of Service, Copyright, & Privacy Policy Recon
- You can Google the copyright and terms of service text from a main target to glean related hosts.
- `"© 2019 Twitch Interactive, Inc." inurl:twitch`
- `"© 2018 Twitch Interactive, Inc." inurl:twitch`
- Public Google Drive documents
- `site:docs.google.com "<company_name>"`
- Documents on documentcloud.org
- `site:documentcloud.org "<company_name>"`
- Documents uploaded to Scribd
- `site:scribd.com "<target_domain>"`
- Public PowerPoint presentations
- `intext:"<company_name>" filetype:pptx`
- Public PDF documents
- `intext:"<company_name>" filetype:pdf`
- .docx documents on target's website
- `intext:"<company_name>" filetype:docx`
- Remember to search gist.github.com, pastebin.com, justpaste.it, pastefs.com, codepen.io, etc.
+5
View File
@@ -0,0 +1,5 @@
- ASNs - Search for IP ranges owned by target company
- [bgp.he.net](https://bgp.he.net)
- ARIN and RIPE - regional IP address space registries with searchable databases
- [ARIN](https://whois.arin.net/ui/query.do)- US Region
- [RIPE](https://apps.db.ripe.net/db-web- ui/#/fulltextsearch)- EU, Central Asia
@@ -0,0 +1,80 @@
- Image search
- [Baidu Images](https://image.baidu.com/)
- [Bing Images](https://www.bing.com/images)
- [Google Image](https://images.google.com/)
- [Image Identification Project](https://www.imageidentify.com/)
- [TinyEye](https://tineye.com/)
- [Yandex Images](https://www.yandex.com/images)
- Analysis
- [FotoForensics](https://www.fotoforensics.com/)
- [Ghiro](https://www.getghiro.org/)
- [ImpulseAdventure](https://www.impulseadventure.com/photo/jpeg-snoop.html)
- [JPEGsnoop](https://github.com/ImpulseAdventure/JPEGsnoop)
- Stock images
- [AlltheFreeStock](https://allthefreestock.com/)
- [Death to Stock](https://deathtothestockphoto.com/)
- [Freeimages](https://www.freeimages.com/)
- [Freestocks.org](https://freestocks.org/)
- [Gratisography](https://www.gratisography.com/)
- [ISO Republic](https://isorepublic.com/)
- [iStockphoto](https://www.istockphoto.com/)
- [Kaboompics](https://kaboompics.com/)
- [LibreStock](https://librestock.com/)
- [Life of Pix](https://www.lifeofpix.com/)
- [NegativeSpace](https://negativespace.co/)
- [New Old Stock](https://nos.twnsnd.co/)
- [Pixabay](https://pixabay.com/)
- [Pexels](https://www.pexels.com/)
- [Stocksnap](https://stocksnap.io/)
- [Shutterstock](https://www.shutterstock.com/)
- [tookapic](https://stock.tookapic.com/)
- [Unplash](https://unsplash.com/)
- Video search & tools
- [Aol Videos](https://on.aol.com/)
- [Bing Videos](https://www.bing.com/?scope=video)
- [DailyMotion](https://www.dailymotion.com/)
- [Deturl](https://deturl.com/)
- [DownloadHealper](https://www.downloadhelper.net/)
- [Earthcam](https://www.earthcam.com/)
- [eclips](https://eclips.io/)
- [Frame by Frame](https://chrome.google.com/webstore/detail/frame-by-frame-for-youtub/elkadbdicdciddfkdpmaolomehalghio?hl=en-GB)
- [Internet Archive: Open Source Videos](https://archive.org/details/opensource_movies)
- [LiveLeak](https://www.liveleak.com/)
- [Metacafe](https://www.metacafe.com/)
- [Metatube](https://www.metatube.com/)
- [Veoh](https://www.veoh.com/)
- [Vimeo](https://vimeo.com/)
- [Yahoo Video Search](https://video.search.yahoo.com/)
- [YouTube](https://www.youtube.com/)
- [YouTube Data Viewer](https://www.amnestyusa.org/citizenevidence)
- Radio/Podcasts
- [iTunes Podcasts](https://www.apple.com/itunes/podcasts)
- [Pocket Casts](https://www.shiftyjelly.com/pocketcasts)
- [Podcast Chart](https://www.podcastchart.com/)
- [Podkicker](https://play.google.com/store/apps/details?id=ait.podka&hl=en)
- Image and Photo Editing
- [Apple Photos](https://www.apple.com/osx/photos)
- [Befunky](https://www.befunky.com/)
- [Canvas Prints](https://www.thecanvasprints.co.uk/photoeditor)
- [Croppola](https://croppola.com/)
- [Fotor](https://www.fotor.com/)
- [Gimp](https://www.gimp.org/)
- [Image Tricks Lite](https://itunes.apple.com/us/app/image-tricks-lite/id403735824?mt=12)
- [Irfanview](https://www.irfanview.com/)
- [Lunapic](https://www124.lunapic.com/editor)
- [Paint.NET](https://www.getpaint.net/index.html)
- [Photoshop](https://www.photoshop.com/)
- [PicMoneky](https://www.picmonkey.com/)
- [Pixlr](https://pixlr.com/)
- [Polarr](https://www.polarr.co/)
- [SumoPaint](https://www.sumopaint.com/)
- [TinyPNG](https://tinypng.com/)
- OSINT Educational Videos
- [Data to Go](https://www.youtube.com/watch?v=_YRs28yBYuI)
- [Amazing mind reader reveals his gift](https://www.youtube.com/watch?v=F7pYHN9iC9I)
+58
View File
@@ -0,0 +1,58 @@
- Investigations
- [411 (US)](https://www.411.com/)
- [Alumni.net](https://www.alumni.net/)
- [Ancestry](https://www.ancestry.com/)
- [Charlie App](https://charlieapp.com/)
- [CrunchBase](https://www.crunchbase.com/)
- [Data 24-7](https://www.data24-7.com/)
- [Family Search](https://familysearch.org/)
- [Fold3 (US Military Records)](https://www.fold3.com/)
- [Forebears](https://forebears.io/)
- [Genealogy Bank](https://www.genealogybank.com/)
- [Kompass](https://www.kompass.com/)
- [MelissaDATA](https://www.melissadata.com/lookups/peoplefinder.asp)
- [The National Archives (UK)](https://www.nationalarchives.gov.uk/)
- [PeekYou](https://www.peekyou.com/)
- [People Search (Australia)](https://www.peoplesearch.com.au/)
- [Pipl](https://pipl.com/)
- [Recruitem](https://recruitin.net/)
- [Rootsweb](https://home.rootsweb.ancestry.com/)
- [SearchBug](https://www.searchbug.com/)
- [Skip Ease](https://www.skipease.com/)
- [SnoopStation](https://snoopstation.com/)
- [Spokeo](https://www.spokeo.com/)
- [ThatsThem](https://thatsthem.com/)
- [USSearch](https://www.ussearch.com/)
- [Zabasearch](https://www.zabasearch.com/)
- Emails
- [Email Address Validator](https://www.email-validator.net/)
- [Email Format](https://email-format.com/)
- [EmailHippo](https://tools.verifyemailaddress.io/)
- [Email Hunter](https://emailhunter.co/)
- [Have I Been Pwned](https://haveibeenpwned.com/)
- [MailTester](https://mailtester.com/testmail.php)
- [Pipl](https://pipl.com/)
- [TCIPUTILS.com Email Test](https://www.tcpiputils.com/email-test)
- [ThatsThem](https://thatsthem.com/reverse-email-lookup)
- [Verify Email](https://verify-email.org/)
- [VoilaNorbert](https://www.voilanorbert.com/)
- Expert Search
- [Academia](https://academia.edu/)
- [CanLaw](https://www.canlaw.com/)
- [ExpertiseFinder](https://www.expertisefinder.com/)
- [ExpertGuide](https://www.expertguide.com.au/)
- [ExpertPages](https://expertpages.com/)
- [Experts.com](https://www.experts.com/)
- [HARO](https://www.helpareporter.com/)
- [Idealist](https://www.idealist.org/)
- [Maven](https://www.maven.co/)
- [MuckRack](https://muckrack.com/)
- [National Speakers Association](https://www.nsaspeaker.org/)
- [Newswise](https://www.newswise.com/)
- [PRNewswire](https://prnmedia.prnewswire.com/)
- [ReseacherID](https://www.researcherid.com/)
- [Speakezee](https://www.speakezee.org/)
- [Sources](https://www.sources.com/)
- [Zintro](https://www.zintro.com/)
+3
View File
@@ -0,0 +1,3 @@
- [Aquatone](https://github.com/michenriksen/aquatone)
- [HTTPScreenshot](https://github.com/breenmachine/httpscreenshot)
- [Eyewitness](https://github.com/FortyNorthSecurity/EyeWitness)
+68
View File
@@ -0,0 +1,68 @@
- General
- [Ask](https://uk.ask.com/)
- [DuckDuckGo](https://duckduckgo.com/)
- [Gigablast](https://gigablast.com/)
- [Google Search](https://www.google.com/)
- [Info.com](https://www.info.com/)
- [Infospace](https://www.infospace.com/)
- [Instya](https://www.instya.com/)
- [iSEEK Education](https://education.iseek.com/iseek/home.page)
- [Startpage](https://www.startpage.com/)
- [Lycos](https://www.lycos.com/)
- [Mojeek](https://www.mojeek.com/)
- [MyWebSearch](https://hp.mywebsearch.com)
- [Oscobo](https://www.oscobo.com/)
- [Parseek (Iran)](https://www.parseek.com/)
- [Search.com](https://www.search.com/)
- [Teoma](https://www.teoma.com/)
- [Wolfram Alpha](https://www.wolframalpha.com/)
- National
- [Baidu (China)](https://www.baidu.com/)
- [Daum (South Korea)](https://www.daum.net/)
- [Eniro (Sweden)](https://www.eniro.se/)
- [Goo (Japan)](https://www.goo.ne.jp/)
- [Najdsi (Slovenia)](https://www.najdi.si/)
- [Naver (South Korea)](https://www.naver.com/)
- [Onet.pl (Poland)](https://www.onet.pl/)
- [Orange (France)](https://www.orange.fr/)
- [Parseek (Iran)](https://www.parseek.com/)
- [SAPO (Portugal)](https://www.sapo.pt/)
- [Search.ch (Switzerland)](https://www.search.ch/)
- [Walla (Israel)](https://www.walla.co.il/)
- [Yandex (Russia)](https://www.yandex.com/)
- Meta
- [All-in-One](https://all-io.net/)
- [AllTheInternet](https://www.alltheinternet.com/)
- [Dogpile](https://www.dogpile.com/)
- [Etools](https://www.etools.ch/)
- [FaganFinder](https://www.faganfinder.com/engines/)
- [iZito](https://www.izito.com/)
- [Myallsearch](https://www.myallsearch.com/)
- [Qwant](https://www.qwant.com/)
- [WebCrawler](https://www.webcrawler.com/)
- [Zapmeta](https://www.zapmeta.com/)
- Specialty
- [2lingual Search](https://www.2lingual.com/)
- [CiteSeerX](https://citeseer.ist.psu.edu/)
- [Digle](https://www.digle.com/)
- [Google Custom Search](https://www.google.com/cse)
- [Internet Archive](https://archive.org/)
- [Million Short](https://millionshort.com/)
- [WorldWideScience.org](https://worldwidescience.org/)
- Visual Search and Clustering
- [Touchgraph](https://www.touchgraph.com/navigator)
- [Yippy](https://yippy.com/)
- Similar Sites Search
- [Google Similar Pages](https://chrome.google.com/webstore/detail/google-similar-pages/pjnfggphgdjblhfjaphkjhfpiiekbbej)
- [SimilarSites](https://www.similarsites.com/)
- [SimilarSiteSearch](https://www.similarsitesearch.com/)
- [SitesLike](https://www.siteslike.com/)
- PDF Search
- [Free Full PDF](https://www.freefullpdf.com/)
- [Offshore Leak Database](https://offshoreleaks.icij.org/)
- [Scribd](https://www.scribd.com/)
- [SlideSearchEngine](https://www.slidesearchengine.com/)
- [SlideShare](https://www.slideshare.net/)
- Code Search
- [NerdyData](https://search.nerdydata.com/)
- [SearchCode](https://searchcode.com/)
+26
View File
@@ -0,0 +1,26 @@
- Shodan is a tool that continuously spiders infrastructure on the internet. It is much more verbose than regular spiders. It captures response data, cert data, stack profiling data, and more. It requires registration.
- [Example Search](https://www.shodan.io/search?query=twitch.tv)
- Official Shodan documentation:
- Data reference: https://datapedia.shodan.io/
- List of search filters: https://www.shodan.io/search/filters
- Query syntax: https://help.shodan.io/the-basics/search-query-fundamentals
- Official Examples: https://www.shodan.io/search/examples
- Shodan Pentesting Guide
- https://community.turgensec.com/shodan-pentesting-guide/
- Shodan and Cert.sh Recon w/ GodfatherOrwa
- https://www.youtube.com/watch?v=YoXM4m1VEM0
- Shodan filters and hacks
- https://www.youtube.com/watch?v=GyZFM5IaH2Y
- 100 Shodan Queries for Discovery
- https://www.osintme.com/index.php/2021/01/16/ultimate-osint-with-shodan-100-great-shodan-queries/
- Org filter dorks for technologies and services:
- https://mr-koanti.github.io/shodan#
- Other interesting queries:
- https://github.com/jakejarvis/awesome-shodan-queries
![[ShodanCheatSheet.png]]
- Automated tooling:
- [Karma v2](https://github.com/Dheerajmadhukar/karma_v2)
- [WTFIS](https://github.com/pirxthepilot/wtfis)
-
Binary file not shown.

After

Width:  |  Height:  |  Size: 2.8 MiB

+153
View File
@@ -0,0 +1,153 @@
- Major social networks
- [Draugiem (Latvia)](https://www.draugiem.lv/)
- [Facebook](https://www.facebook.com/)
- [Facenama (Iran)](https://facenama.com/)
- [Google+](https://plus.google.com/)
- [Instagram](https://www.instagram.com/)
- [Linkedin](https://www.linkedin.com/)
- [Mixi (Japan)](https://mixi.jp/)
- [Odnoklassniki (Russia)](https://ok.ru/)
- [Pinterest](https://www.pinterest.com/)
- [Qzone (China)](https://qzone.qq.com/)
- [Reddit](https://www.reddit.com/)
- [Taringa (Latin America)](https://www.taringa.net/)
- [Tinder](https://www.gotinder.com/)
- [Tumblr](https://www.tumblr.com/)
- [Twitter](https://twitter.com/)
- [Weibo (China)](https://www.weibo.com/overseas)
- [VKontakte](https://vk.com/)
- [Xing](https://www.xing.com/)
- Social Network analysis
- [Gephi](https://gephi.org/)
- [Visual Investigative Scenarios](https://vis.occrp.org/)
- Real-time Search, Social Media search, Tools
- [Audiense](https://www.audiense.com/)
- [Brandwatch](https://www.brandwatch.com/)
- [Buffer](https://buffer.com/)
- [Buzz sumo](https://buzzsumo.com/)
- [Cyfe](https://www.cyfe.com/)
- [Geocreepy](https://www.geocreepy.com/)
- [Geofeedia](https://geofeedia.com/)
- [Hootsuite](https://hootsuite.com/)
- [HowSociable](https://www.howsociable.com/)
- [Hashtatit](https://www.hashatit.com/)
- [Klear](https://klear.com/)
- [MustBePresent](https://sproutsocial.com/)
- [Netvibes](https://www.netvibes.com/)
- [Rival IQ](https://www.rivaliq.com/)
- [RSS Social Analyzer](https://chrome.google.com/webstore/detail/rss-social-analyzer/ncmajlpbfckecekfamgfkmckbpihjfdn?hl=en)
- [SocialBakers](https://www.socialbakers.com/)
- [Social Searcher](https://www.social-searcher.com/)
- [Tagboard](https://tagboard.com/)
- Social media tools
- Twitter
- [AllMyTweets](https://www.allmytweets.net/connect/)
- [Backtweets](https://backtweets.com/)
- [Blue Nod](https://bluenod.com/)
- [burrrd.](https://burrrd.com/)
- [Commun.it](https://commun.it/)
- [doesfollow](https://doesfollow.com/)
- [Foller.me](https://foller.me/)
- [Followerwonk](https://followerwonk.com/)
- [Ground Signal](https://www.groundsignal.com/)
- [HappyGrumpy](https://www.happygrumpy.com/)
- [Harvard TweetMap](https://worldmap.harvard.edu/tweetmap)
- [Hashtagify](https://hashtagify.me/)
- [Hashtags.org](https://www.hashtags.org/)
- [ManageFlitter](https://manageflitter.com/)
- [Mentionmapp](https://mentionmapp.com/)
- [OneMillionTweetMap](https://onemilliontweetmap.com/)
- [Queryfeed](https://queryfeed.net/)
- [SnapBird](https://snapbird.org/)
- [Social Bearing](https://www.socialbearing.com/)
- [Social Rank First Follower](https://socialrank.com/firstfollower)
- [Tagdef](https://tagdef.com/)
- [Tinfoleak](https://tinfoleak.com/)
- [Trends24](https://trends24.in/)
- [TrendsMap](https://trendsmap.com/)
- [tweepsect](https://tweepsect.com/)
- [TweetArchivist](https://www.tweetarchivist.com/)
- [TweetDeck](https://www.tweetdeck.com/)
- [TweetMap](https://worldmap.harvard.edu/tweetmap)
- [Tweetreach](https://tweetreach.com/)
- [TweetTunnel](https://tweettunnel.com/)
- [Tweriod](https://www.tweriod.com/)
- [Twicsy](https://twicsy.com/)
- [Twilert](https://www.twilert.com/)
- [Twitonomy](https://www.twitonomy.com/)
- [TwitRSS](https://twitrss.me/)
- [Twitter Advanced Search](https://twitter.com/search-advanced?lang=en)
- [Twitter Audit](https://www.twitteraudit.com/)
- [Twitter Chat Schedule](https://tweetreports.com/twitter-chat-schedule)
- [Twitterfall](https://twitterfall.com/)
- [Twitter Search](https://search.twitter.com/)
- [Schedule Warble](https://warble.co/)
- Facebook
- [Agora Pulse](https://barometer.agorapulse.com/)
- [Commun.it](https://commun.it/)
- [Fanpage Karma](https://www.fanpagekarma.com/)
- [Fb-sleep-stats](https://github.com/sqren/fb-sleep-stats)
- [Find my Facebook ID](https://findmyfbid.com/)
- [Lookup-ID.com](https://lookup-id.com/)
- [SearchIsBack](https://searchisback.com/)
- Instagram
- [Hashtagify](https://hashtagify.me/)
- [Iconosquare](https://iconosquare.com/)
- [Picodash](https://www.picodash.com/)
- [Social Rank](https://www.socialrank.com/)
- Pinterest
- [Pingroupie](https://pingroupie.com/)
- Reddit
- [Imgur](https://imgur.com/)
- [Mostly Harmless](https://kerrick.github.io/Mostly-Harmless/#features)
- [Reddit Suite](https://chrome.google.com/webstore/detail/reddit-enhancement-suite/kbmfpngjjgdllneeigpgjifpgocmfgmb)
- [Reddit Investigator](https://www.redditinvestigator.com/)
- [Reddit Metrics](https://redditmetrics.com/)
- [SnoopSnoo](https://snoopsnoo.com/)
- VKontakte
- [Дезертир](https://vk.com/app3046467)
- [Barkov.net](https://vk.barkov.net/)
- [Report Tree](https://dcpu.ru/vk_repost_tree.php)
- [Target Log](https://targetolog.com/)
- [VK Community Search](https://vk.com/communities)
- [VK Parser](https://vkparser.ru/)
- [VK People Search](https://vk.com/people)
- [VK to RSS Appspot](https://vk-to-rss.appspot.com/)
- Tumblr
- [Tumblr Search](https://www.tumblr.com/search)
- LinkedIn
- [FTL](https://chrome.google.com/webstore/detail/ftl/lkpekgkhmldknbcgjicjkomphkhhdkjj?hl=en-GB)
- Blog Search
- [Twingly](https://www.twingly.com/)
- Forums/Discussion Boards Search
- [Boardreader](https://boardreader.com/)
- [Facebook Groups](https://www.facebook.com/)
- [Google Groups](https://groups.google.com/)
- [Linkedin Groups](https://www.linkedin.com/)
- [Xing Groups](https://www.xing.com/communities)
- Username Check
- [Check User Names](https://www.checkusernames.com/)
- [Knowem](https://www.knowem.com/)
- [Name Chk](https://www.namechk.com/)
- [Name Checkr](https://www.namecheckr.com/)
- Q&A Sites
- [Answers.com](https://www.answers.com/)
- [eHow](https://www.ehow.com/)
- [Quora](https://www.quora.com/)
- [StackExchange](https://stackexchange.com/)
- Facebook
- Mutual friends search: `https://www.facebook.com/browse/mutual_friends/?uid=<profileid1>&node=<profileid2>`
+25
View File
@@ -0,0 +1,25 @@
- Origin Domains
- Content Delivery Networks (CDNs) are used to deliver website content/traffic more efficiently and reduce server load.
- CDNs are *not* proxies for the real webserver--the real webserver is the origin.
- Oftentimes, CDNs will block security testing payloads. Find the origin server and bypass the filtering/CDN.
- Examples (for Akamai):
- `origin-sub.domain.com`
- `origin.sub.domain.com`
- Try sending `Pragma: akamai-x-get-true-cache-key` - key often has origin in it
- Things to look for:
- Logins
- Defaultcontent
- Bypass domains (dev, qa, ww1,ww2,)
- 302s
- Basic Auth
- Old looking frameworks
- Outdated Priv Pol / Trademark
- Favicon analysis
- Useful when you have a *ton* of webservers to analyze - fingerprint by the favicon
- [FavFreak](https://github.com/devanshbatham/FavFreak)
- Reporting guidelines:
- Detailed enough to reproduce
- Record your proof in case the issue gets fixed before your submission is triaged
- Some orgs are more mature than others, it may take time ask your triager
- Autogenerated / autosubmitted reports are obvious especially if they lack any good information
- Prove impact. Take it further if you can. Example: An XSS with a simple “alert(1)” could get you $50-100, but can you prove its more impactful? We love to see it!
+674
View File
@@ -0,0 +1,674 @@
- Misc
- [Barcode Reader](https://online-barcode-reader.inliteresearch.com/)
- [OpenRefine](https://github.com/OpenRefine)
- [OSINT Framework](https://osintframework.com/)
- [OsintStalker](https://github.com/milo2012/osintstalker)
- [Outwit](https://www.outwit.com/)
- [Recorded Future](https://www.recordedfuture.com/)
- [Scraper Wiki](https://scraperwiki.com/)
- [Tapir](https://github.com/pentestify/tapir)
- Language
- [2lingual](https://www.2lingual.com/)
- [Apertium](https://www.apertium.org/)
- [Babelfish](https://www.babelfish.com/)
- [Bablic](https://www.bablic.com/)
- [Bing Translator](https://www.bing.com/translator)
- [Frengly](https://frengly.com/)
- [Gengo](https://gengo.com/)
- [Google Input Tools](https://www.google.com/inputtools/try)
- [Google Translate](https://translate.google.com/)
- [Google Tranlslate Extension](https://chrome.google.com/webstore/detail/google-translate/aapbdbdomjkkjkaonfhkkikfgjllcleb?hl=en)
- [IdiomaX Translation](https://www.idiomax.com/online-translator.aspx)
- [imTranslator](https://imtranslator.net/translation)
- [Lexicool Translation](https://www.lexicool.com/translate.asp)
- [Linguee](https://www.linguee.com/)
- [Microsoft Translator](https://www.microsoft.com/en-us/translator)
- [Noslang](https://www.noslang.com/)
- [Pleco](https://www.pleco.com/)
- [PROMT-Online](https://translation2.paralink.com/)
- [Reddit/r/translator](https://www.reddit.com/r/translator)
- [Reverso](https://www.reverso.net/)
- [Slangit](https://slangit.com/)
- [Systran](https://www.systransoft.com/)
- [Translate.com](https://www.translate.com/)
- [Unbabel](https://unbabel.com/)
- [WorldLingo](https://www.worldlingo.com/)
- [WorldReference.com](https://www.wordreference.com/)
- [Yamli (Arabic Search Engine)](https://www.yamli.com/)
- [Yandex Translate](https://translate.yandex.ru/)
- Geospacial and Mapping
- [Bing Maps](https://www.bing.com/maps)
- [CartoDB](https://cartodb.com/)
- [Colorbrewer](https://colorbrewer2.org/)
- [CrowdMap](https://crowdmap.com/)
- [CTLRQ Address Lookup](https://ctrlq.org/maps/address)
- [Dominoc925](https://dominoc925-pages.appspot.com/mapplets/cs_mgrs.html)
- [GeoNames](https://www.geonames.org/)
- [Esri](https://www.esri.com/)
- [Flash Earth](https://www.flashearth.com/)
- [Google Earth](https://www.google.com/earth)
- [Google Maps](https://www.google.com/maps)
- [Google My Maps](https://www.google.com/maps/about/mymaps)
- [GPSVisualizer](https://www.gpsvisualizer.com/)
- [GrassGIS](https://grass.osgeo.org/)
- [Hyperlapse](https://github.com/TeehanLax/Hyperlapse.js)
- [Inspire Geoportal](https://inspire-geoportal.ec.europa.eu/)
- [InstantAtlas](https://www.instantatlas.com/)
- [Instant Google Street View](https://www.instantstreetview.com/)
- [Kartograph](https://kartograph.org/)
- [Leaflet](https://leafletjs.com/)
- [MapAList](https://mapalist.com/)
- [MapBox](https://www.mapbox.com/)
- [Mapchart.net](https://mapchart.net/)
- [MapHub](https://maphub.net/)
- [Mapline](https://mapline.com/)
- [Mapquest](https://www.mapquest.com/)
- [NGA GEOINT](https://github.com/ngageoint)
- [OpenLayers](https://openlayers.org/)
- [Open Street Map](https://www.openstreetmap.org/)
- [QGIS](https://qgis.org/)
- [QuickMaps](https://chrome.google.com/webstore/detail/quick-maps/bgbojmobaekecckmomemopckmeipecij)
- [StoryMaps](https://storymaps.arcgis.com/en)
- [Scribble Maps](https://scribblemaps.com/)
- [Tableau](https://www.tableausoftware.com/)
- [Timescape](https://www.timescape.io/)
- [WorldMap Harvard](https://worldmap.harvard.edu/)
- [ViaMichelin](https://www.viamichelin.com/)
- [Yahoo Maps](https://maps.yahoo.com/)
- [Zeemaps](https://www.zeemaps.com/)
- Academic Resources
- [Academia](https://www.academia.edu/)
- [Academic Journals](https://www.academicjournals.org/)
- [African Journal Online](https://www.ajol.info/)
- [American Society of Civil Engineers](https://ascelibrary.org/)
- [Base](https://www.base-search.net/)
- [Bibsonomy](https://www.bibsonomy.org/)
- [Cambridge Journals](https://journals.cambridge.org/)
- [Core](https://core.ac.uk/search)
- [Elsevier](https://www.elsevier.com/)
- [Google Scholar](https://scholar.google.com/)
- [Grey Literature List of Gateways](https://csulb.libguides.com/graylit)
- [Grey Literature Report](https://www.greylit.org/)
- [Journal Guide](https://www.journalguide.com/)
- [JSTOR](https://www.jstor.org/)
- [NRC Research Press](https://www.nrcresearchpress.com/)
- [Open Access Scientific Journals](https://www.pagepress.org/)
- [Oxford Journals](https://www.oxfordjournals.org/)
- [PubMed](https://www.ncbi.nlm.nih.gov/pubmed)
- [Quetzal Search](https://www.quetzal-search.info/)
- [Research Gate](https://www.researchgate.net/)
- [ScienceDirect](https://www.sciencedirect.com/)
- [SCIRP](https://www.scirp.org/)
- [Springer](https://link.springer.com/)
- [Science Publications](https://www.thescipub.com/)
- [Taylor & Francis Online](https://www.tandfonline.com/)
- [Wiley](https://eu.wiley.com/)
- [World Digital Library](https://www.wdl.org/)
- [World Science](https://worldwidescience.org/)
- Fact Check
- [About Urban Legends](https://urbanlegends.about.com/)
- [Check](https://meedan.com/check)
- [Fact Check](https://www.factcheck.org/)
- [Full Fact](https://fullfact.org/)
- [Snopes](https://www.snopes.com/)
- [Verification Handbook](https://verificationhandbook.com/)
- [Verification Junkie](https://verificationjunkie.com/)
- Data and Statistics
- [AGOA Data Center](https://agoa.info/)
- [AidData](https://aiddata.org/)
- [AWS Public Datasets](https://aws.amazon.com/datasets)
- [Bank for International Settlements Statistics](https://www.bis.org/statistics/index.htm)
- [BP Statistical Review of World Energy](https://www.bp.com/en/global/corporate/energy-economics/statistical-review-of-world-energy.html)
- [CIA World Factbook](https://www.cia.gov/library/publications/the-world-factbook)
- [Data.gov.uk](https://data.gov.uk/)
- [DBPedia](https://wiki.dbpedia.org/)
- [European Commission Eurobarometer](https://ec.europa.eu/COMMFrontOffice/PublicOpinion)
- [European Union Open Data Portal](https://open-data.europa.eu/en/data)
- [Eurostat](https://ec.europa.eu/eurostat)
- [globalEDGE Database of International Business Statistics](https://globaledge.msu.edu/tools-and-data/dibs)
- [Google Finance](https://www.google.com/finance)
- [Google Public Data Explorer](https://www.google.com/publicdata/directory)
- [Government of Canada Open Data](https://open.canada.ca/en)
- [HIS Piers](https://www.ihs.com/products/piers.html)
- [ILO World Employment and Social Outlook Trends](https://www.ilo.org/global/research/global-reports/weso/2015/lang--en/index.htm)
- [IMF World Economic Outlook Database](https://www.imf.org/external/ns/cs.aspx?id=28)
- [Index Mundi](https://www.indexmundi.com/)
- [International Energy Agency Statistics](https://www.iea.org/statistics)
- [Junar](https://junar.com/)
- [Knoema](https://knoema.com/)
- [LandMatrix](https://landmatrix.org/)
- [Library, University of Michigan: Statistics and Datasets](https://www.lib.umich.edu/browse/Statistics%20and%20Data%20Sets)
- [Nation Master](https://www.nationmaster.com/statistics)
- [OECD Data](https://data.oecd.org/)
- [OECD Factbook](https://www.oecd-ilibrary.org/economics/oecd-factbook_18147364)
- [Open Data Network](https://www.opendatanetwork.com/)
- [Paul Hensels General Informational Data Page](https://www.paulhensel.org/dataintl.html)
- [Pew Research Center](https://www.pewinternet.org/datasets)
- [Population Reference Bureau Data Finder](https://www.prb.org/DataFinder.aspx)
- [PRS Risk Indicators](https://www.prsgroup.com/)
- [SESRIC Basic Social and Economic Indicators](https://www.sesric.org/baseind.php)
- [Statista](https://www.statista.com/)
- [The Atlas of Economic Complexity](https://atlas.cid.harvard.edu/)
- [Trading Economics](https://www.tradingeconomics.com/)
- [UN COMTRADE Database](https://comtrade.un.org/)
- [UNCTAD Country Fact Sheets](https://unctad.org/en/Pages/DIAE/World%20Investment%20Report/Country-Fact-Sheets.aspx)
- [UNCTAD Investment Country Profiles](https://unctad.org/en/Pages/Publications/Investment-country-profiles.aspx)
- [UNCTAD STAT](https://unctadstat.unctad.org/)
- [UN Data](https://data.un.org/)
- [UNECE](https://w3.unece.org/PXWeb/en)
- [UNIDO Statistical Databases](https://www.unido.org/resources/statistics/statistical-databases.html)
- [Upsala Conflict Data Program](https://www.pcr.uu.se/research/UCDP)
- [US Data and Statistics](https://www.usa.gov/statistics)
- [WHO Data](https://www.who.int/gho/en)
- [World Integrated Trade Solution](https://wits.worldbank.org/)
- [Vizala](https://vizala.com/)
- Writing and Office
- [Arguman](https://en.arguman.org/)
- [Bibme](https://www.bibme.org/)
- [Cite This For Me](https://chrome.google.com/webstore/detail/cite-this-for-me-web-cite/nnnmhgkokpalnmbeighfomegjfkklkle?hl=en)
- [FreeOffice](https://www.freeoffice.com/)
- [Grammarly](https://chrome.google.com/webstore/detail/grammarly-for-chrome/kbfnbcaeplbcioakkpcpgfkobkghlhen?hl=en)
- [GoogleDocs](https://www.google.com/docs/about)
- [LibreOffice](https://www.libreoffice.org/)
- [MS Office](https://products.office.com/)
- [Office Online](https://chrome.google.com/webstore/detail/office-online/ndjpnladcallmjemlbaebfadecfhkepb/related)
- [OmniOutliner](https://www.omnigroup.com/omnioutliner)
- [OnlyOffice](https://www.onlyoffice.com/)
- [oTranscribe](https://otranscribe.com/)
- [Scrivener](https://literatureandlatte.com/scrivener.php)
- [TextExpander](https://smilesoftware.com/textexpander)
- [UltraEdit](https://www.ultraedit.com/)
- [WriteApp](https://writeapp.me/)
- Slideshow and Presentation
- [Canva](https://www.canva.com/create/presentations)
- [Deckset](https://www.decksetapp.com/)
- [emaze](https://www.emaze.com/)
- [GoogleDocs](https://docs.google.com/)
- [Haiku Deck](https://www.haikudeck.com/)
- [Keyonote](https://www.apple.com/de/mac/keynote)
- [KnowledgeVision](https://www.knowledgevision.com/)
- [LibreOffice](https://www.libreoffice.org/)
- [Live Slides](https://www.liveslides.com/)
- [MS Office](https://products.office.com/)
- [Powtoon](https://www.powtoon.com/)
- [presenterswall](https://www.presenterswall.com/)
- [Prezi](https://prezi.com/)
- [Slidedog](https://slidedog.com/)
- [SlidePresenter](https://www.slidepresenter.com/)
- [Slides](https://slides.com/)
- [Sway](https://sway.com/)
- [vcasmo](https://www.vcasmo.com/)
- [Visme](https://www.visme.co/)
- [Zoho Docs](https://www.zoho.com/docs/show.html)
- Digital Publishing
- [Canva](https://www.canva.com/)
- [Doclayer](https://standaert.net/doclayer)
- [Issuu](https://issuu.com/)
- [Omeka](https://omeka.org/)
- [Scribd](https://www.scribd.com/)
- Newsletter Tools
- [AWeber](https://www.aweber.com/)
- [BombBomb](https://bombbomb.com/)
- [Campayn](https://campayn.com/)
- [Canva](https://www.canva.com/)
- [ConstantContact](https://www.constantcontact.com/)
- [Freshmail](https://freshmail.com/)
- [iContact](https://www.icontact.com/)
- [Mailchimp](https://mailchimp.com/)
- [Mailjet](https://www.mailjet.com/)
- [Mailup](https://www.mailup.com/)
- [Newsletter Creator for Gmail](https://chrome.google.com/webstore/detail/newsletter-creator-for-gm/cihaednhfbocfdiflmpccekcmjepcnmb)
- [sendinblue](https://www.sendinblue.com/)
- [Sendicate](https://www.sendicate.net/)
- [Sendloop](https://sendloop.com/)
- [Signupto](https://www.signupto.com/)
- [TinyLetter](https://tinyletter.com/)
- [Vision6](https://www.vision6.com.au/)
- Digital Storytelling
- [Animatron](https://www.animatron.com/)
- [Animoto](https://animoto.com/)
- [Exposure](https://exposure.co/)
- [MakeBeliefsComix](https://www.makebeliefscomix.com/)
- [Neatline](https://neatline.org/)
- [Odyssey](https://cartodb.github.io/odyssey.js)
- [Pageflow](https://pageflow.io/)
- [Piclits](https://www.piclits.com/compose_dragdrop.aspx)
- [Racontr](https://racontr.com/)
- [RaptMedia](https://www.raptmedia.com/)
- [RawShorts](https://www.rawshorts.com/)
- [Slate](https://slate.adobe.com/)
- [Steller](https://steller.co/)
- [Storyform](https://storyform.co/)
- [StoryMap](https://storymap.knightlab.com/)
- [StoryMaps](https://storymaps.arcgis.com/)
- [Sway](https://sway.com/)
- [Thinglink](https://www.thinglink.com/)
- [Tripline](https://www.tripline.net/)
- [Wevideo](https://www.wevideo.com/)
- [VideoScribe](https://www.videoscribe.co/)
- [Zooburst](https://zooburst.com/)
- Infographics and Data Visualization
- [Adobe Color CC](https://color.adobe.com/create/color-wheel)
- [Aeon](https://www.aeontimeline.com/)
- [Befunky](https://www.befunky.com/)
- [Cacoo](https://cacoo.com/)
- [Canva](https://www.canva.com/)
- [Chart.js](https://www.chartjs.org/)
- [creately](https://creately.com/)
- [Crossfilter](https://square.github.io/crossfilter)
- [csvkit](https://github.com/wireservice/csvkit)
- [Data Visualization Catalogue](https://datavizcatalogue.com/)
- [D3js](https://d3js.org/)
- [Datawrapper](https://datawrapper.de/)
- [Dropmark](https://www.dropmark.com/)
- [easely](https://www.easel.ly/)
- [Exhibit](https://www.simile-widgets.org/exhibit)
- [Flot](https://www.flotcharts.org/)
- [FusionCharts](https://www.fusioncharts.com/)
- [Google Developers: Charts](https://developers.google.com/chart)
- [GraphX](https://spark.apache.org/graphx)
- [Hohli](https://charts.hohli.com/)
- [Inkscape](https://inkscape.org/)
- [Infogr.am](https://infogr.am/)
- [Java Infovis Toolkit](https://philogb.github.io/jit)
- [JpGraph](https://jpgraph.net/)
- [Kartograph](https://kartograph.org/)
- [Knoema](https://knoema.com/)
- [Leaflet](https://leafletjs.com/)
- [Listify](https://listify.okfnlabs.org/)
- [Linkuroius](https://linkurio.us/)
- [Lucidchart](https://www.lucidchart.com/)
- [Mapline](https://mapline.com/)
- [Nodebox](https://www.nodebox.net/)
- [OpenLayers](https://openlayers.org/)
- [Piktochart](https://piktochart.com/)
- [Pixcone](https://www.pixcone.com/)
- [Pixxa](https://www.pixxa.com/)
- [Plotly](https://plot.ly/)
- [StoryMap](https://storymap.knightlab.com/)
- [QlikView](https://www.visualintelligence.co.nz/qlikview)
- [Raphael](https://dmitrybaranovskiy.github.io/raphael)
- [Shanti Interactive](https://www.viseyes.org/)
- [Snappa](https://snappa.io/)
- [Statpedia](https://statpedia.com/)
- [Tableau](https://www.tableau.com/)
- [Tableau Public](https://public.tableau.com/)
- [Textures.js](https://riccardoscalco.github.io/textures)
- [Tiki-toki](https://www.tiki-toki.com/)
- [Tik-tok](https://datanews.github.io/tik-tok)
- [Timeflow](https://github.com/FlowingMedia/TimeFlow/wiki)
- [Timeline](https://timeline.knightlab.com/)
- [Timeline](https://www.simile-widgets.org/timeline)
- [Timescape](https://www.timescape.io/)
- [Timetoast](https://www.timetoast.com/)
- [Venngage](https://venngage.com/)
- [Visage](https://visage.co/)
- [Vis.js](https://visjs.org/)
- [Visme](https://www.visme.co/)
- [Vortex](https://www.dotmatics.com/products/vortex)
- [ZingChart](https://www.zingchart.com/)
- Productivity
- [2Do](https://www.2doapp.com/)
- [Any.do](https://www.any.do/)
- [Asana](https://asana.com/)
- [Droptask](https://www.droptask.com/)
- [Flask](https://flask.io/)
- [Focus booster](https://www.focusboosterapp.com/)
- [Freecamp](https://freedcamp.com/)
- [MyLifeOrganized](https://www.mylifeorganized.net/)
- [Remember the Milk](https://www.rememberthemilk.com/)
- [RescueTime](https://www.rescuetime.com/)
- [StayFocusd](https://chrome.google.com/webstore/detail/stayfocusd/laankejkbhbdhmipfmgcngdelahlfoji/details)
- [Taskboard](https://taskboard.matthewross.me/)
- [TikiTiki](https://ticktick.com/)
- [Tinygain](https://tinygain.com/)
- [Trello](https://trello.com/)
- [Todo.ly](https://todo.ly/)
- [Todoist](https://en.todoist.com/)
- [Toggle](https://www.toggl.com/)
- [Toodledo](https://www.toodledo.com/)
- [Workflowy](https://workflowy.com/)
- [Wunderlist](https://www.wunderlist.com/)
- Document and reference management
- [DocumentCloud](https://www.documentcloud.org/)
- [Endnote](https://endnote.com/)
- [F1000](https://f1000.com/)
- [Investigative Dashboard Search](https://data.occrp.org/)
- [Mendeley](https://www.mendeley.com/)
- [Omnity](https://www.omnity.io/)
- [Overview](https://www.overviewdocs.com/)
- [Papers](https://papersapp.com/)
- [Readcube](https://www.readcube.com/)
- [RefME](https://www.refme.com/)
- [Zotero](https://www.zotero.org/)
- PDF Management
- [Foxit Reader](https://www.foxitsoftware.com/products/pdf-reader)
- [ilovepdf](https://www.ilovepdf.com/)
- [PDFExpert](https://pdfexpert.com/)
- [PDFx](https://www.metachris.com/pdfx)
- [Smallpdf](https://smallpdf.com/)
- OCR
- [Free Online OCR](https://www.newocr.com/)
- [Online OCR](https://www.onlineocr.net/)
- Cloud storage and file share
- [Amazon Cloud drive](https://www.amazon.com/clouddrive/home)
- [Box](https://www.box.com/)
- [Boxcryptor](https://www.boxcryptor.com/)
- [Cloudapp](https://www.getcloudapp.com/)
- [CloudFuze](https://www.cloudfuze.com/)
- [CloudHQ](https://www.cloudhq.net/)
- [Dropbox](https://www.dropbox.com/)
- [Droplr](https://droplr.com/)
- [DropSend](https://www.dropsend.com/)
- [Duplicati](https://www.duplicati.com/)
- [Egnyte](https://www.egnyte.com/)
- [GoodSync](https://www.goodsync.com/)
- [Google Drive](https://www.google.com/intl/nl/drive)
- [hubiC](https://hubic.com/)
- [iCloud](https://www.icloud.com/)
- [Mediafire](https://www.mediafire.com/)
- [Mega](https://mega.nz/)
- [Mindbox](https://minbox.com/)
- [Multicloud](https://www.multcloud.com/)
- [Onedrive](https://onedrive.live.com/)
- [Onehub](https://www.onehub.com/)
- [Otixo](https://www.otixo.com/)
- [pCloud](https://www.pcloud.com/)
- [Sendthisfile](https://www.sendthisfile.com/)
- [Sendspace](https://www.sendspace.com/)
- [Spideroak](https://spideroak.com/)
- [SugarSync](https://www.sugarsync.com/)
- [Syncthing](https://syncthing.net/)
- [TransferBigFiles](https://www.transferbigfiles.com/)
- [Tresorit](https://tresorit.com/)
- Web Automation
- [IFTTT](https://ifttt.com/)
- [Workflow](https://workflow.is/)
- [Zapier](https://zapier.com/)
- Dashboard
- [Chartio](https://chartio.com/)
- [Clicdata](https://www.clicdata.com/)
- [Cyfe](https://www.cyfe.com/)
- [Dashthis](https://dashthis.com/)
- [DataDeck](https://www.datadeck.com/)
- [Geckoboard](https://www.geckoboard.com/)
- [Klipfolio](https://www.klipfolio.com/)
- [Qlik](https://www.qlik.com/)
- Wikis
- [DokuWiki](https://www.dokuwiki.org/dokuwiki)
- [Foswiki](https://foswiki.org/)
- [MediaWiki](https://www.mediawiki.org/wiki/MediaWiki)
- [PmWiki](https://www.pmwiki.org/)
- [TiddlyWiki](https://tiddlywiki.com/)
- [Tiki Wiki](https://info.tiki.org/)
- [TWiki](https://twiki.org/)
- [Wikidot](https://www.wikidot.com/)
- [Zim](https://zim-wiki.org/downloads.html)
- Collaboration and Project Management
- [10kinsights](https://www.10000ft.com/)
- [15Five](https://www.15five.com/)
- [92fiveApp](https://92fiveapp.com/)
- [5pm](https://www.5pmweb.com/)
- [ActionMint](https://www.actionmint.com/)
- [ActiveCollab](https://www.activecollab.com/)
- [Advanseez](https://www.advanseez.com/)
- [AllThings](https://www.allthings.io/)
- [Any.do](https://www.any.do/)
- [Apollo](https://www.apollohq.com/)
- [Asana](https://asana.com/)
- [Authorea](https://www.authorea.com/)
- [AWW](https://awwapp.com/)
- [Azendoo](https://www.azendoo.com/)
- [Basecamp](https://basecamp.com/)
- [Binfire](https://www.binfire.com/)
- [Breeze](https://www.breeze.pm/)
- [Canvanizer](https://canvanizer.com/)
- [Casual](https://casual.pm/)
- [Cardboardit](https://cardboardit.com/)
- [Cardsmith](https://cardsmith.co/)
- [CloudApp](https://www.getcloudapp.com/)
- [CollaborateCloud](https://www.collaboratecloud.com/)
- [Comindwork](https://www.comindwork.com/)
- [Conceptboard](https://conceptboard.com/)
- [Confluence](https://www.atlassian.com/software/confluence)
- [eGroupWare](https://www.egroupware.org/)
- [Elegantt](https://elegantt.com/)
- [Firepad](https://firepad.io/)
- [Firesub](https://firesub.com/)
- [Flask](https://flask.io/)
- [Float](https://www.float.com/)
- [Flow](https://www.getflow.com/)
- [Frame](https://frame.io/)
- [Freedcamp](https://freedcamp.com/)
- [GetDoneDone](https://www.getdonedone.com/)
- [Glasscubes](https://www.glasscubes.com/)
- [GQueues](https://www.gqueues.com/)
- [Hightail](https://www.hightail.com/)
- [hitask](https://hitask.com/)
- [Huddle](https://www.huddle.com/)
- [KabanTool](https://kanbantool.com/)
- [Kanboard](https://kanboard.net/)
- [Kerika](https://kerika.com/)
- [Loomio](https://www.loomio.org/)
- [LumoFlow](https://lumoflow.com/)
- [Nozbe](https://nozbe.com/)
- [Nutcache](https://www.nutcache.com/)
- [Minute](https://www.getminute.com/)
- [Mural](https://mural.co/)
- [OmniGroup](https://www.omnigroup.com/)
- [OnlyOffice](https://www.onlyoffice.com/)
- [Padlet](https://padlet.com/)
- [Piematrix](https://www.piematrix.com/)
- [Pinstriped](https://pinstriped.com/)
- [Plan](https://plan.io/)
- [Planzone](https://www.planzone.com/)
- [Podio](https://podio.com/)
- [ProjectManager](https://www.projectmanager.com/)
- [ProjectPlace](https://www.projectplace.com/)
- [ProofHub](https://www.proofhub.com/)
- [Quip](https://quip.com/)
- [Quire](https://quire.io/)
- [Realtimeboard](https://realtimeboard.com/)
- [Redbooth](https://redbooth.com/)
- [Restya](https://restya.com/)
- [Scribblar](https://www.scribblar.com/)
- [SeavusProjectViewer](https://www.seavusprojectviewer.com/)
- [Smartsheet](https://www.smartsheet.com/)
- [Stackfield](https://www.stackfield.com/)
- [Stormboard](https://www.stormboard.com/)
- [SyncSpace](https://infinitekind.com/syncspace)
- [Taiga](https://taiga.io/)
- [TargetProcess](https://www.targetprocess.com/)
- [Taskboard](https://taskboard.matthewross.me/)
- [TeamAllocator](https://www.teamallocator.com/)
- [Team Pad](https://www.team-pad.com/)
- [TeamWork](https://www.teamwork.com/)
- [TeamWorklive](https://www.teamworklive.com/)
- [Transparent Business](https://transparentbusiness.com/)
- [Trello](https://trello.com/)
- [Tuzzit](https://www.tuzzit.com/)
- [Twiddla](https://www.twiddla.com/)
- [Weekdone](https://weekdone.com/)
- [Whiteboard Fox](https://whiteboardfox.com/)
- [Worknoard](https://www.workboard.com/)
- [Workfront](https://www.workfront.com/)
- [Wrike](https://www.wrike.com/)
- [Yammer](https://www.yammer.com/)
- [YouTrack](https://www.jetbrains.com/youtrack)
- [Zoho](https://www.zoho.com/)
- Communication
- [Adobe Connect](https://www.adobe.com/products/adobeconnect.html)
- [AnyDesk](https://anydesk.com/remote-desktop)
- [AnyMeeting](https://www.anymeeting.com/)
- [BeamYourScreen](https://www.beamyourscreen.com/)
- [Blackboard](https://www.blackboard.com/online-collaborative-learning/index.aspx)
- [clearvale](https://www.clearvale.com/marketing/en)
- [Digital Samba](https://www.digitalsamba.com/)
- [Discourse](https://www.discourse.org/)
- [Exo Platform](https://www.exoplatform.com/)
- [FaceFlow](https://www.faceflow.com/)
- [Fleep](https://fleep.io/)
- [Flowdock](https://www.flowdock.com/)
- [FreeConferenceCall](https://www.freeconferencecall.com/)
- [FreeScreenSharing](https://www.freescreensharing.com/)
- [Friends](https://moose-team.github.io/friends)
- [Glance](https://ww2.glance.net/)
- [GoToMeeting](https://www.gotomeeting.com/)
- [Highfive](https://highfive.com/)
- [Icq](https://icq.com/)
- [Infinite](https://www.infiniteconferencing.com/)
- [Jitsi](https://jitsi.org/)
- [Join.me](https://www.join.me/)
- [Jostle](https://www.jostle.me/)
- [Lets Chat](https://sdelements.github.io/lets-chat)
- [lifesize](https://www.lifesize.com/)
- [Linphone](https://www.linphone.org/)
- [Live Conference Pro](https://www.liveconferencepro.com/)
- [Lucid Meetings](https://www.lucidmeetings.com/)
- [LumoFlow](https://lumoflow.com/)
- [MeetingOne](https://www.meetingone.com/)
- [MeWe](https://mewe.com/)
- [mikogo](https://www.mikogo.com/)
- [MyBB](https://www.mybb.com/)
- [Open Whisper Systems](https://whispersystems.org/)
- [Phorum](https://www.phorum.org/)
- [Polycom](https://www.polycom.com/)
- [Quicktopic](https://www.quicktopic.com/)
- [ReadyTalk](https://www.readytalk.com/)
- [Rocket.Chat](https://rocket.chat/)
- [screenleap](https://www.screenleap.com/)
- [Skype](https://www.skype.com/)
- [Slack](https://slack.com/)
- [StartMeeting](https://www.startmeeting.com/)
- [Talky](https://talky.io/)
- [Teamviewer](https://www.teamviewer.com/)
- [Telegram](https://telegram.org/)
- [Tibbr](https://www.tibbr.com/)
- [Tixeo](https://www.tixeo.com/en/secure-video-conferencing)
- [Toc](https://toc.im/)
- [TrueConf](https://trueconf.com/)
- [Vanilla Forums](https://vanillaforums.org/)
- [Veeting rooms](https://www.veeting.com/)
- [VeriShow](https://www.verishow.com/)
- [Viadesk](https://www.viadesk.com/)
- [VideoLink2](https://videolink2.me/)
- [Vivicom](https://www.vivicom.de/)
- [Webex](https://www.webex.com/)
- [WhatsApp](https://www.whatsapp.com/)
- [Zoho Meeting](https://www.zoho.com/meeting)
- [Zoom](https://zoom.us/)
- [Zulip](https://www.zulip.org/)
- Calendars/Scheduling
- [Assistant](https://www.assistant.to/)
- [Calendly](https://calendly.com/)
- [Cozi](https://www.cozi.com/)
- [Doodle](https://doodle.com/)
- [Meetin.gs](https://www.meetin.gs/)
- [MyMemorizer](https://www.mymemorizer.com/)
- [ScheduleOnce](https://www.scheduleonce.com/)
- [TeamUp](https://www.teamup.com/)
- [Teamweek](https://teamweek.com/)
- Mind-mapping, Concept-mapping, Idea Generation
- [The Brain](https://www.thebrain.com/)
- [Bubbl.us](https://bubbl.us/)
- [Coogle](https://coggle.it/)
- [Creately](https://creately.com/)
- [Fast Idea Generator](https://diytoolkit.org/tools/fast-idea-generator-2)
- [Germ](https://germ.io/)
- [GroupMap](https://www.groupmap.com/)
- [iMindMap](https://imindmap.com/products/imindmap)
- [iMindQ](https://www.imindq.com/)
- [InstaGrok](https://www.instagrok.com/)
- [Lucidchart](https://www.lucidchart.com/)
- [Mind42](https://mind42.com/)
- [Mind Genius](https://www.mindgenius.com/)
- [Mindjet](https://www.mindjet.com/)
- [Mind Manager](https://www.mindjet.com/mindmanager)
- [Mind Map](https://chrome.google.com/webstore/detail/mindmap/gdaeohpmcenmffofpikllphdhlkkocfa#detail/mindmap/gdaeohpmcenmffofpikllphdhlkkocfa)
- [Mindmeister](https://www.mindmeister.com/)
- [Mindomo](https://www.mindomo.com/)
- [Popplet](https://popplet.com/)
- [Realtimeboard](https://realtimeboard.com/)
- [Scapple](https://literatureandlatte.com/scapple.php)
- [Sketchboard](https://sketchboard.io/)
- [Slatebox](https://slatebox.com/)
- [Spiderscribe](https://www.spiderscribe.net/)
- [StoryMap](https://storymap.knightlab.com/)
- [yWorks](https://www.yworks.com/en/products_yed_gallery.html)
- [Xmind](https://www.xmind.net/)
- Privacy and Encryption
- [Abine](https://www.abine.com/)
- [AdblockPlus](https://adblockplus.org/)
- [Adium](https://adium.im/)
- [boxcryptor](https://www.boxcryptor.com/)
- [CCleaner](https://www.piriform.com/ccleaner)
- [Chatsecure](https://chatsecure.org/)
- [Disconnect](https://disconnect.me/)
- [Duck Duck Go Search Engine](https://duckduckgo.com/)
- [Epic Privacy Browser](https://www.epicbrowser.com/)
- [Eraser](https://eraser.heidi.ie/)
- [FileVault](https://support.apple.com/en-us/HT204837)
- [GNU PG](https://www.gnupg.org/download/index.html)
- [GPG Tools](https://gpgtools.org/)
- [Guardian Project](https://guardianproject.info/)
- [Guerrilla Mail](https://www.guerrillamail.com/)
- [Hotspot Shield](https://www.hotspotshield.com/)
- [HTTPs Everywhere](https://www.eff.org/)
- [I2P](https://geti2p.net/)
- [IPLeak](https://www.ipleak.net/)
- [Ixquick Search Engine](https://www.ixquick.com/)
- [justdeleteme](https://justdelete.me/)
- [KeePass Password Safe](https://keepass.info/)
- [Lastpass](https://lastpass.com/)
- [Lockbin](https://lockbin.com/)
- [Mailbox](https://mailbox.org/)
- [Mailvelope](https://www.mailvelope.com/)
- [Master Password](https://masterpasswordapp.com/)
- [NoScript](https://noscript.net/)
- [Open DNS](https://www.opendns.com/home-internet-security)
- [Open PGP](https://www.enigmail.net/index.php/en)
- [Open Whisper Systems](https://whispersystems.org/)
- [Oscobo Search Engine](https://oscobo.co.uk/)
- [OSSEC](https://ossec.github.io/)
- [Panopticlick](https://panopticlick.eff.org/)
- [Pidgin](https://www.pidgin.im/)
- [Pixel Block](https://chrome.google.com/webstore/detail/pixelblock/jmpmfcjnflbcoidlgapblgpgbilinlem)
- [Privacy Badger](https://www.eff.org/privacybadger)
- [Privazer](https://privazer.com/)
- [Proton Mail](https://protonmail.com/)
- [Qubes](https://www.qubes-os.org/)
- [Script Safe](https://chrome.google.com/webstore/detail/scriptsafe/oiigbmnaadbkfbmpbfijlflahbdbdgdf?hl=en)
- [Securesha](https://securesha.re/)
- [Silent circle](https://www.silentcircle.com/)
- [Snort](https://www.snort.org/)
- [Spideroak](https://spideroak.com/)
- [Surveilliance Self Defense](https://ssd.eff.org/)
- [Tails](https://tails.boum.org/)
- [Thunderbird](https://www.mozilla.org/en-US/thunderbird)
- [Tor Project](https://www.torproject.org/)
- [Unseen.is](https://unseen.is/)
- [Wickr](https://wickr.com/)
- [WOT](https://www.mywot.com/)
+93
View File
@@ -0,0 +1,93 @@
- Keywords Research
- [Google Trends](https://www.google.com/trends)
- [Linkio](https://www.linkio.com/)
- [Keyword Discovery](https://www.keyworddiscovery.com/)
- [KeywordTool](https://keywordtool.io/)
- [One Look Reverse Dictionary](https://www.onelook.com/reverse-dictionary.shtml)
- [Word Tracker](https://www.wordtracker.com/)
- [Soovle](https://www.soovle.com/)
- Web History
- [Archive.is](https://archive.is/)
- [CachedView](https://cachedview.com/)
- [Wayback Machine](https://comskills-ukraine.co.uk/test/)
- [Wayback Machine Archiver](https://github.com/jsvine/waybackpack)
- Monitoring
- [Alltop](https://alltop.com/)
- [Awasu](https://www.awasu.com/)
- [Bridge.Leslibres](https://bridge.leslibres.org/)
- [Bridge.Suumitsu](https://bridge.suumitsu.eu/)
- [Deltafeed](https://bitreading.com/deltafeed)
- [Feed Filter Maker](https://feed.janicek.co/)
- [FeedReader](https://www.feedreader.com/)
- [FetchRSS](https://fetchrss.com/)
- [Flipboard](https://flipboard.com/)
- [FollowThatPage](https://www.followthatpage.com/)
- [Google Alerts](https://www.google.com/alerts)
- [Mention](https://en.mention.com/)
- [Netvibes](https://www.netvibes.com/)
- [Newsblur](https://newsblur.com/)
- [OmeaReader](https://www.jetbrains.com/omea/reader)
- [OnWebChange](https://onwebchange.com/)
- [RSS Bridge](https://bridge.suumitsu.eu/)
- [RSS Feed Reader](https://chrome.google.com/webstore/detail/rss-feed-reader/pnjaodmkngahhkoihejjehlcdlnohgmp)
- [RSS Subscription Extension](https://chrome.google.com/webstore/detail/rss-subscription-extensio/bmjffnfcokiodbeiamclanljnaheeoke?hl=en)
- [Talkwalker](https://www.talkwalker.com/)
- [The Old Reader](https://theoldreader.com/)
- [versionista](https://versionista.com/)
- [WebSite Watcher](https://www.aignes.com/index.htm)
- [Winds](https://winds.getstream.io/)
- Bookmarking
- [Bibsonomy](https://www.bibsonomy.org/)
- [Booky](https://booky.io/)
- [ChannelKit](https://channelkit.com/)
- [Clipix](https://www.clipix.com/)
- [Diigo](https://www.diigo.com/)
- [Evernote](https://evernote.com/)
- [Dropmark](https://www.dropmark.com/)
- [eLink](https://elink.io/)
- [FAVable](https://www.favable.com/)
- [Google Bookmarks](https://www.google.com/bookmarks)
- [Instapaper](https://www.instapaper.com/)
- [Keeeb](https://keeeb.com/)
- [Klart](https://klart.co/)
- [LiveBinders](https://www.livebinders.com/)
- [Microsoft OneNote](https://office.microsoft.com/en-us/onenote)
- [Papaly](https://papaly.com/)
- [Paperwork](https://github.com/twostairs/paperwork)
- [Pearltrees](https://www.pearltrees.com/)
- [Raindrop](https://raindrop.io/)
- [Refind](https://refind.com/)
- [Scrible](https://www.scrible.com/)
- [Stache](https://getstache.com/)
- [Thinkery](https://thinkery.me/)
- [Trackplanet](https://trackpanel.net/)
- [Wepware](https://www.wepware.com/)
- [Zotero](https://www.zotero.org/)
- Browsers
- [Brave](https://brave.com/)
- [CentBrowser](https://www.centbrowser.com/)
- [Chrome](https://www.google.com/chrome)
- [Comodo Dragon](https://www.comodo.com/home/browsers-toolbars/browser.php)
- [Edge](https://www.microsoft.com/en-us/windows/microsoft-edge/microsoft-edge)
- [Firefox](https://www.mozilla.org/)
- [Opera](https://www.opera.com/)
- [Safari](https://www.apple.com/safari)
- [Sleipnir](https://www.fenrir-inc.com/jp/sleipnir)
- [Slimjet](https://www.slimjet.com/)
- [SRWare Iron](https://www.srware.net/en/software_srware_iron.php)
- [Vivaldi](https://vivaldi.com/)
- [Yandex Browser](https://browser.yandex.com/desktop/main)
- Offline Browsing
- [A1 Website Download](https://www.microsystools.com/products/website-download)
- [gmapcatcher](https://github.com/heldersepu/gmapcatcher)
- [HTTrack](https://www.httrack.com/)
- [Resolver](https://metaproductsrevolver.com/)
- [SiteSucker](https://ricks-apps.com/osx/sitesucker/index.html)
- [WebAssistant](https://www.proxy-offline-browser.com/download.html)
- [Website Ripper Copier](https://www.tensons.com/products/websiterippercopier)