Allyson O'Malley

LiveTargetsFinder. Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

dnsobserver. A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack.

BurpParamFlagger. A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

s3Takeover. Automate the process of an S3 bucket subdomain takeover via dangling CNAME record

p12Cracker. A simple tool to brute force a password-protected PFX/P12 file

pentest_scripts. Various pentesting scripts, focusing on iOS and network security

p12CrackerGo. A simple Go script to concurrently brute force a password-protected PKCS#12 (PFX/P12) file

MailBot. Tool to automatically email results from your Python scripts to your inbox as text or as a file attachment, storing the sender email account's password securely in the keychain.

collectCertInfo. Collects basic SSL certificate information from a list of targets and stores results in a SQLite database.

needle. The iOS Security Testing Framework

VoteTracker. VoteTracker iOS App

go-bitbucket. Unofficial Go client library for bitbucket.org, auto-generated from official OAI spec. NOT a fork of or otherwise related to other go-bitbucket clients.