https://github.com/proditis/mini-tools

A collection of mini tools and snippets for various purposes
https://github.com/proditis/mini-tools

bugbounty csp cybersecurity dns hacking sni snippets

Last synced: 4 months ago
JSON representation

A collection of mini tools and snippets for various purposes

• Host: GitHub
• URL: https://github.com/proditis/mini-tools
• Owner: proditis
• License: bsd-2-clause
• Created: 2022-12-11T02:27:18.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2022-12-21T10:58:15.000Z (about 2 years ago)
• Last Synced: 2024-06-22T04:54:46.674Z (8 months ago)
• Topics: bugbounty, csp, cybersecurity, dns, hacking, sni, snippets
• Language: Go
• Homepage: https://proditis.github.io/BugBounty-Journal/
• Size: 30.3 KB
• Stars: 5
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# mini-tools: A collection of mini tools and snippets for various purposes

- [mini-tools: A collection of mini tools and snippets for various purposes](#mini-tools-a-collection-of-mini-tools-and-snippets-for-various-purposes)

  - [`certnames`](#certnames)

  - [`cfworkers`](#cfworkers)

  - [`cspparse`](#cspparse)

  - [`cyberchef`](#cyberchef)

  - [`nsparse` (heavily experimental atm)](#nsparse-heavily-experimental-atm)

  - [`sniprobe`](#sniprobe)

## `certnames`

Gets the alternate subject DNS names from a PEM certificate

and performs a DNS lookup on them

## `cfworkers`

A small collection of cloudflare workers, that can be used

for scanning purposes :smiley:

## `cspparse`

Parse the CSP policy from the returned headers of a given URI

and try to extract URL and fully qualified domain names (that

optionally match a given word)

**example**

```

cspparse https://intigriti.com

```

## `cyberchef`

A small collection of https://github.com/gchq/CyberChef functions

that can be used into other projects. Right now only AnalyzeHash

is implemented.

## `nsparse` (heavily experimental atm)

Takes a domain performs dns lookups for interesting txt records

along with other interesting queries (NS, A, MX, SOA) all in one go.

**update**: found this little baby instead https://github.com/projectdiscovery/dnsx and gonna be focusing on it

## `sniprobe`

Takes a host and optional https port and after it resolves the hostname,

grabs the DNS names of its certificate and performs GET requests, pinned

on the first hosts' IP and thus keeping SNI happy