{"id":13552400,"url":"https://github.com/stevemcilwain/quiver","last_synced_at":"2025-04-03T03:31:32.107Z","repository":{"id":38779240,"uuid":"236829881","full_name":"stevemcilwain/quiver","owner":"stevemcilwain","description":"Quiver is the tool to manage all of your tools for bug bounty hunting and penetration testing.","archived":false,"fork":false,"pushed_at":"2020-06-23T04:48:32.000Z","size":500,"stargazers_count":206,"open_issues_count":11,"forks_count":38,"subscribers_count":16,"default_branch":"master","last_synced_at":"2024-12-06T19:22:11.339Z","etag":null,"topics":["bugbounty","hacking","hacking-tools","kali","kali-linux","penetration-testing","pentesting","zsh","zsh-plugin"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/stevemcilwain.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-01-28T20:06:01.000Z","updated_at":"2024-10-12T05:20:42.000Z","dependencies_parsed_at":"2022-09-17T12:52:39.415Z","dependency_job_id":null,"html_url":"https://github.com/stevemcilwain/quiver","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevemcilwain%2Fquiver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevemcilwain%2Fquiver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevemcilwain%2Fquiver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevemcilwain%2Fquiver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/stevemcilwain","download_url":"https://codeload.github.com/stevemcilwain/quiver/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246933435,"owners_count":20857048,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bugbounty","hacking","hacking-tools","kali","kali-linux","penetration-testing","pentesting","zsh","zsh-plugin"],"created_at":"2024-08-01T12:02:03.420Z","updated_at":"2025-04-03T03:31:27.054Z","avatar_url":"https://github.com/stevemcilwain.png","language":"Shell","funding_links":[],"categories":["Shell","Shell (473)"],"sub_categories":[],"readme":"# Quiver : A Meta-Tool for Kali Linux\n\nQuiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and doesn't hide them behind scripting that can be cumbersome to maintain or update. Instead you can use Quiver to build a composable, on-the-fly workflow for every situation. \n\nQuiver doesn't cover all tools, it's my own curated collection which I am still adding to and updating. There are so many tools for many different types of engagements and targets, so I jsut try to focus on tools that are maintained and current. Feel free to ask for the inclusion of tools you prefer in the issues list.\n\n# Release 1.0 \n\nAfter months of hard work during lockdown, I am happy to introduce the 1.0 release of Quiver! This version contains many improvements over previous versions such as per-namespace help and installers, auto-fill variables such as RHOST, RPORT, LHOST, LPORT, PROJECT, WORDLIST, URL and global configuration settings for customizing settings like a menu of your favorite wordlists. If you've been using Quiver before now, then many of the changes in 1.0 are breaking changes. Please familiarize yourself with the new commands using `qq-help`. If you previously were storing Quiver values in .zshrc, most of these can now be stored as global vars using `qq-vars-global`. \n\n* [RELEASES.md](RELEASES.md)\n\n# Features\n\n* Prefills the commands within a terminal\n* Well-organized commands with tab auto-completion\n* Installs as a ZSH / Oh-My-ZSH shell plugin\n* Customizable settings, Global variables\n* Recon phase commands for OSINT\n* Enumeration of common services\n* Web enumeration, brute-forcing and hacking\n* Exploit compilation helpers\n* Reverse shell handlers\n* Content serving commands\n* Built-in logbook for on-the-fly notes, saving commands\n* Render markdown notes to the command line\n* Kali Linux system management\n* Update notification and install\n* Installers for dependencies\n\n# Installation\n\nQuiver requires the following:\n\n* ZSH (apt-get install zsh)\n* oh-my-zsh (optional requirement but recommended: https://ohmyz.sh/)\n* Kali Linux (https://kali.org)\n\nClone the repo to your OMZ custom plugins folder.\n\n```bash\n\ngit clone https://github.com/stevemcilwain/quiver.git ~/.oh-my-zsh/custom/plugins/quiver\n\n```\nEdit ~/.zshrc to load the plugin.\n\n```\n\nplugins=(git quiver)\n\n```\n\nSource .zshrc to load the plugin and you're done. On first load, Quiver will install a few core packages.\n\n```\n\nsource ~/.zshrc\n\n```\n\n## Getting Started\n\nQuiver organizes commands into namespaces starting with `qq-`, such as `qq-enum-web` or `qq-recon-domains`.\nTo see an overview of all namespaces simply use `qq-help`. Each namespace also has it's own help command, such as `qq-enum-web-help` that provides a listing of available commands. All commands support tab completion and search. \n\n## Installing Dependencies\n\nEvery namespace was a qq-\u003cnamespace\u003e-install command that will install all of the tools relavent to that namespace. You can install just the tools you need, or use `qq-install-all` to run the installers of all namespaces.\n\n## Workflow\n\nQuiver is meant to provide a composable, on-the-fly workflow. It replaces the common painful raw workflow of reading your notes, finding a command, copy, paste, replace the values with target values, copy, paste, run. Some rely heavily on completely automated scripts or frameworks that run all the commands for a workflow and output well-formatted data. While these scripts are great for many use cases, they can often be brittle, hide the underlying tools and techniques and be cumbersom to modify. Instead, Quiver gives you a happy medium, you can run commands quickly and easy with well-organized output, composing your workflow as you go depending on the targets and context. \n\n## Example Workflow\n\nHere is an example workflow for bug bounty hunting:\n\n### Prep\n\n```bash\n\n# if you have markdown notes, configure the path \nqq-vars-global-set-notes\n\n# set some session variables for the bounty target \nqq-vars-set-project \nqq-vars-set-domain \n\n# generate scope files from the bounty url\nqq-project-rescope\n\n# save vars for other terminal sessions, qq-vars-load\nqq-vars-save\n\n```\n\n### Passive Recon\n\n```bash\n\n# search for target files\nqq-recon-org-files\n\n# search downloaded files for urls\nqq-recon-org-files-urls\n\n# mine github repos for secrets\nqq-recon-github-gitrob\n\n# check dns records\nqq-enum-dns-dnsrecon\n\n# look for ASNs and networks\nqq-recon-networks-amass-asns\nqq-recon-networks-bgpview-ipv4\n\n# get subdomains\nqq-recon-subs-subfinder\n\n# resolve and parse subdomains\nqq-recon-subs-resolve-massdns\nqq-recon-subs-resolve-parse\n\n```\n\n### Active Web Enumeration\n\n```bash\n\n# Download out robots.txt\nqq-enum-web-dirs-robots\n\n# ID a WAF if present\nqq-enum-web-waf\n\n# Parse SSL certs\nqq-enum-web-ssl-certs\n\n# Spider the site\nqq-enum-web-gospider\n\n# Brute force URIs\nqq-enum-web-dirs-ffuf\n\n# Read your notes\nqq-notes\n\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstevemcilwain%2Fquiver","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstevemcilwain%2Fquiver","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstevemcilwain%2Fquiver/lists"}