Trick to add all friends to facebook group by a single click:

Method 1: Add all friends to facebook group script:

First, click on Create group and write a group name.

Note:

• Select only one friend in Members section to initiate all group related processes.
• Privacy of Group:
  Facebook takes care of your group members privacy. So you have to choose a privacy option which your group wants.
• Here some other instructions for facebook group permissions:
  Public:
  Anyone can see the group, its members, and their posts.
  Closed:
  Anyone can find the group and see who is a member of it, but only members can see posts.
  Secret:
  Only members can find the group and see posts.

• Now click on create a group then choose an icon of your group and click on OK.
• You have created a group. Now, add some description about your group and click on add members section box.
• Copy a given code from this link

Metod 2 use https://chrome.google.com/webstore/detail/group-invite-all/eeajicmampllnpkmfimkhefbndkfeloo

Read More

GoldenEye

GoldenEye is an python app for SECURITY TESTING PURPOSES ONLY!

GoldenEye is a HTTP DoS Test Tool.

Attack Vector exploited: HTTP Keep Alive + NoCache

Code:

USAGE: ./goldeneye.py <url> [OPTIONS]

OPTIONS:
   Flag           Description                     Default
   -u, --useragents   File with user-agents to use                     (default: randomly generated)
   -w, --workers      Number of concurrent workers                     (default: 50)
   -s, --sockets      Number of concurrent sockets                     (default: 30)
   -m, --method       HTTP Method to use 'get' or 'post'  or 'random'  (default: get)
   -d, --debug        Enable Debug Mode [more verbose output]          (default: False)
   -n, --nosslcheck   Do not verify SSL Certificate                    (default: True)
   -h, --help         Shows this help

I find video from youtube to show use :

Download

Read More

Web Crawler Security Tool

DomainHostingView is a utility for Windows that collects extensive information about a domain by using a series of DNS and WHOIS queries, and generates HTML report that can be displayed in any Web browser. 
The information displayed by the report of DomainHostingView includes: the hosting company or data center that hosts the Web server, mail server, and domain name server (DNS) of the specified domain, the created/changed/expire date of the domain, domain owner, domain registrar that registered the domain, list of all DNS records, and more...

System Requirements And Limitations

This utility works on any version of Windows, starting from Windows XP and up to Windows 10, including x64 versions of Windows. This utility also works on Windows 2000, but without the IDN support.
Firewall/router requirements: You should allow DomainHostingView to connect the following outgoing TCP/UDP ports: 43 (WHOIS), 53 (DNS), 80 (HTTP), and 25 (SMTP).
The report created by DomainHostingView is based on the information provided by public WHOIS servers. If WHOIS server is temporary down, some information won't be displayed in the report. Also, some WHOIS servers may block your IP address if you use DomainHostingView to get reports about many domains in short perion of time.
DomainHostingView Features

DomainHostingView is a Unicode application and this it can display properly WHOIS records containing non-English characters.
DomainHostingView supports Internationalized domain names (IDN). When you type a domain with non-English characters, DomainHostingView automatically converts it into a format that can be used in the WHOIS and DNS servers.
DomainHostingView parses the text returned by the WHOIS servers, extracts the important data, and displays it in easy-to-read summary.
DomainHostingView also displays the raw text returned by the WHOIS servers, with a small enhancement - every http link is displayed as clickable link that opens the Web page in a new window.

Download

Read More

Network Hacking Toolkit

These are basic functions that help with some tasks for Ethical Hacking and Penetration Testing.
Most of them are related with networking, and the implementations are intended to be understandable for who wants to read the source code and learn from that.
Some techniques implemented in the current version are:

• ARP Poisoning
• ARP Sniffing
• DHCP Discover
• DHCP Starvation
• LAND Attack
• SNMP Cracking
• SYN Flooding
• TCP Flags Analysis
• TCP ISN Analysis
• TCP Port Scan

Dependencies


Habu requires:

• Click
• Python (3.x),
• Scapy-Python3
• Matplotlib (Optional, only needed if you want to make some graphs)

Download

Read More

GoLismero - the web knife

GoLismero is an open source framework for security testing. . It is currently oriented towards web security 
and manage a lot of well-known security tools (OpenVAS, Wfuzz, sqlmap, DNS Recon, robot analyzer ...) 

Among its features are: 

- Independence of the real platform. Tested on Windows, Linux, * BSD and OS X. 
- There are no dependencies on native libraries. The entire structure has been written in pure Python. 
- Good performance compared to other frameworks written in Python and other programming languages. 
- Very easy to use. 
- Development programs is extremely simple.
- The framework also collects and unifies the results of well-known tools: sqlmap, xsser, openvas, dnsrecon, theharvester.

Download

Read More

Nipper - Toolkit Web Scan for Android

La Primera herramienta de escáner de vulnerabilidades WEB, En entorno Android (Versión para iOS en desarrollo), este escáner de vulnerabilidad fue enfocado para CMS más usadas, (WordPress, Drupal, Joomla. Blogger ).

En su primera versión Nipper cuenta con 10 módulos distintos, para recopilar información acerca de un URL en específica.

Su interfaz ha sido pensada para que tan solo con unos “toques” en su interfaz extraerías gran parte de su información.

Módulos Disponibles:

• IP Server
• CMS Detect & Version
• DNS Lookup
• Nmap ports IP SERVER
• Enumeration Users
• Enumeration Plugins
• Find Exploit Core CMS
• Find Exploit DB
• CloudFlare Resolver

Nipper NO requiere ROOT, tan solo requiere permiso a internet.

Compatible desde 2.3 a Android L.

Download Nipper

Read More

All in one tool for Information Gathering, Vulnerability Scanning and Crawling

RED HAWK is An All In One Tool For Information Gathering, SQL Vulnerability Scannig and Crawling. Coded In PHP.

Features:

• Basic Scan
  • Site Title NEW
  • IP Address
  • Web Server Detection IMPROVED
  • CMS Detection
  • Cloudflare Detection
  • robots.txt Scanner
• Whois Lookup IMPROVED
• Geo-IP Lookup
• Grab Banners IMPROVED
• DNS Lookup
• Subnet Calculator
• Nmap Port Scan
• Sub-Domain Scanner IMPROVED
  • Sub Domain
  • IP Address
• Reverse IP Lookup & CMS Detection IMPROVED
  • Hostname
  • IP Address
  • CMS
• Error Based SQLi Scanner
• Bloggers View NEW
  • HTTP Response Code
  • Site Title
  • Alexa Ranking
  • Domain Authority
  • Page Authority
  • Social Links Extractor
  • Link Grabber
• WordPress Scan NEW
  • Sensitive Files Crawling
  • Version Detection
  • Version Vulnerability Scanner
• Crawler
• MX Lookup NEW
• Scan For Everything - The Old Lame Scanner

Released Versions:

- Version 1.0.0 [11-06-2017]
- Version 1.1.0 [15-06-2017]
- Version 2.0.0 [11-08-2017]

Changelog:

• Version 1.0.0
  • Initial Launch
• Version 1.1.0
  • Updated The fix command
• Version 2.0.0
  • Separated all scans so that you are served the amount of information you need
  • Sub-Domain Scanner improved
  • fix command improved
  • Web Server Detection Improved
  • CMS Detection Improved
  • Banner Grabbing Improved
  • Added WordPress Scanner
  • Added Bloggers View
  • Added MX Lookup
  • Added Update option
  • RED HAWK Banner Updated
  • Many Other Internal Fixes

Installation:

1. Run The Tool and Type fix This will Install All Required Modules.
2. For The Bloggers View To Work Properly you have to configure RED HAWK with moz.com's api keys for that follow the following steps:

How To Configure RED HAWK with moz.com for Bloggers View Scan

• Create an account in moz follow this link : https://moz.com/community/join
• After successful account creation and completing the verification you need to generate the API Keys
• You can get your API Keys here: https://moz.com/products/mozscape/access
• Get your AccessID and SecretKey and replace the $accessID and $secretKey variable's value in the config.php file
• All set, now you can enjoy the bloggers view.

Usage:

• git clone https://github.com/Tuhinshubhra/RED_HAWK
• cd RED_HAWK
• php rhawk.php
• Use the "help" command to see the command list or type in the domain name you want to scan (without Http:// OR Https://).
• Select whether The Site Runs On HTTPS or not.
• Select the type of scan you want to perform
• Leave the rest to the scanner

List of CMS Supported
RED HAWK's CMS Detector currently is able to detect the following CMSs (Content Management Systems) in case the website is using some other CMS, Detector will return could not detect.

• WordPress
• Joomla
• Drupal
• Magento

Video Demonstration

TODOs

• Make a proper update option ( Installs current version automatically )
• Add more CMS to the detector
• Improve The WordPress Scanner ( Add User, Theme & Plugins Enumeration )
• Create a web version of the scanner
• Add XSS & LFI Scanner
• Improve the Links grabber thingy under bloggers view
• Add some other scans under the Bloggers View

Download RED HAWK

Read More