PHISH_HUNTER_PRO
Advanced phishing investigation and disruption toolkit
File Explorer
- gitkeep
- .gitignore
- cli.py
- deep_recon.py
- dos_attack.py
- dos_attack_hardcore.py
- fuzzer.py
- mini_scanner.py
- phish_disruptor.py
- proxy_list.txt
- README.md
- requirements.txt
- scanner.py
- spammer.py
- user_agents.txt
- utils.py
- wordlist.txt
- xss_injector.py
# Use via CDN
jsDelivrjsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.
Command Glossary
Commands referenced in this DOCs, explained below.
ffuf
View Details ▼
ffuf
A fast web fuzzer written in Go.
The `FUZZ` keyword is used as a placeholder. `ffuf` will try to hit the URL by replacing the word `FUZZ` with every word in the wordlist.
ffuf -c -w {{path/to/wordlist.txt}} -u {{https://example.com/FUZZ}}
Enumerate directories using [c]olored output and a [w]ordlist specifying a target [u]RL:
ffuf -w {{path/to/subdomains.txt}} -u {{https://FUZZ.example.com}}
Enumerate webservers of subdomains by changing the position of the keyword:
ffuf -o -w {{path/to/wordlist.txt}} -u {{https://example.com/FUZZ}} -t {{500}} -x {{http://127.0.0.1:8080}}
Fuzz with specified [t]hreads (default: 40) and pro[x]ying the traffic and save [o]utput to a file:
git clone
View Details ▼
git clone
Clone an existing repository.
git clone {{remote_repository_location}} {{path/to/directory}}
Clone an existing repository into a new directory (the default directory is the repository name):
git clone --recursive {{remote_repository_location}}
Clone an existing repository and its submodules:
git clone {{[-n|--no-checkout]}} {{remote_repository_location}}
Clone only the `.git` directory of an existing repository:
gobuster
View Details ▼
gobuster
Brute-forces hidden paths on web servers and more.
gobuster dir {{[-u|--url]}} {{https://example.com/}} {{[-w|--wordlist]}} {{path/to/file}}
Discover directories and files that match in the wordlist:
gobuster dns {{[-do|--domain]}} {{example.com}} {{[-w|--wordlist]}} {{path/to/file}}
Discover subdomains:
gobuster s3 {{[-w|--wordlist]}} {{path/to/file}}
Discover Amazon S3 buckets:
nmap
View Details ▼
nmap
Network exploration tool and security/port scanner.
Some features (e.g. SYN scan) activate only when `nmap` is run with root privileges.
See also: `hping3`, `masscan`, `naabu`, `rustscan`, `zmap`.
nmap -v{{1|2|3}} {{ip_or_hostname}}
Scan the top 1000 ports of a remote host with various [v]erbosity levels:
nmap -T5 -sn {{192.168.0.0/24|ip_or_hostname1,ip_or_hostname2,...}}
Run a ping sweep over an entire [s]ub[n]et or individual hosts very aggressively:
sudo nmap -A -iL {{path/to/file.txt}}
Enable OS detection, version detection, script scanning, and traceroute of hosts from a file:
openssl s_client
View Details ▼
openssl s_client
Create TLS client connections.
openssl s_client -connect {{host}}:{{port}} 2>/dev/null | openssl x509 -noout -dates
Display the start and expiry dates for a domain's certificate:
openssl < /dev/null s_client -connect {{host}}:{{port}}
Display the certificate presented by an SSL/TLS server:
openssl s_client -connect {{host}}:{{port}} -servername {{hostname}}
Set the Server Name Indicator (SNI) when connecting to the SSL/TLS server:
pip3
View Details ▼
pip3
This command is an alias of `pip`.
tldr pip
View documentation for the original command:
pkill
View Details ▼
pkill
Signal process by name.
Mostly used for stopping processes.
pkill "{{process_name}}"
Kill all processes which match:
pkill {{[-f|--full]}} "{{command_name}}"
Kill all processes which match their full command instead of just the process name:
pkill {{[-9|-SIGKILL]}} "{{process_name}}"
Force kill matching processes (can't be blocked):
python3
View Details ▼
python3
This command is an alias of `python`.
tldr python
View documentation for the original command:
sqlmap
View Details ▼
sqlmap
Detect and exploit SQL injection flaws.
python sqlmap.py {{[-u|--url]}} "{{http://www.example.com/vuln.php?id=1}}"
Run sqlmap against a single target URL:
python sqlmap.py {{[-u|--url]}} "{{http://www.example.com/vuln.php}}" --data="{{id=1}}"
Send data in a POST request (`--data` implies POST request):
python sqlmap.py {{[-u|--url]}} "{{http://www.example.com/vuln.php}}" --data="{{query=foobar;id=1}}" --param-del="{{;}}"
Change the parameter delimiter (& is the default):
apt install
View Details ▼
apt install
Install packages for Debian-based distributions.
sudo apt install {{package}}
Install a package, or update it to the latest version:
sudo apt install {{[-V|--verbose-versions]}} {{package}}
Display verbose package version information during installation or update:
apt
View Details ▼
apt
Package manager for Debian-based distributions.
Intended as a user-friendly alternative to `apt-get` for interactive use.
For equivalent commands in other package managers, see <https://wiki.archlinux.org/title/Pacman/Rosetta>.
sudo apt update
Update the list of available packages and versions (recommended before running other `apt` commands):
apt search {{package}}
Search packages by name or description:
apt list {{package}}
Search packages by name only (supports wildcards like `*`):
dirb
View Details ▼
dirb
Scan HTTP-based webservers for directories and files.
dirb {{https://example.org}}
Scan a webserver using the default wordlist:
dirb {{https://example.org}} {{path/to/wordlist.txt}}
Scan a webserver using a custom wordlist:
dirb {{https://example.org}} -r
Scan a webserver non-recursively:
script
View Details ▼
script
Record all terminal output to a typescript file.
script
Record a new session to a file named `typescript` in the current directory:
exit
Stop recording:
script {{path/to/session.out}}
Record a new session to a custom filepath:
systemctl start
View Details ▼
systemctl start
Start systemd units.
systemctl start {{unit}}
Start a unit:
systemctl start {{unit}} --user
Start a user unit:
query
View Details ▼
query
Display information about user sessions and process.
query session
Display all user sessions:
query session /server:{{hostname}}
Display the current user sessions on a remote computer:
query user
Display logged in users: