VPS-web-hacking-tools

Automatically install some web hacking/bug bounty tools for your VPS.

O.S supported :

• Ubuntu 20.04 x64
• Debian 10 x64

Installation

apt-get update -y && apt-get install git -y
cd /tmp && git clone https://github.com/supr4s/VPS-web-hacking-tools && cd VPS-web-hacking-tools && ./installer.sh

Available tools list

Subdomains enumeration

• Amass
• Assetfinder
• Crobat
• Findomain
• Github-subdomains

DNS resolver

• dnsx
• MassDNS
• PureDNS

Visual recon

• Aquatone
• Gowitness

HTTP probe

• httprobe
• httpx

Web crawler

• Gospider
• Hakrawler

Network scanner

• Masscan
• Naabu
• Nmap

HTTP parameter

• Arjun

Fuzzing tools

• ffuf
• Gobuster

SSRF tools

• SSRFmap *
• Gopherus *
• Interactsh *

API hacking tools

• Kiterunner + API routes *

Wordlists

• SecLists

Vulns - XSS

• Dalfox
• kxss
• XSStrike

Vulns - SQL Injection

• NoSQLMap
• SQLMap

CMS Scanner

• WPscan *
• droopescan *
• AEM-Hacker *

Vulns - Scanner

• Jaeles
• Nuclei

JavaScript hunting

• LinkFinder
• SecretFinder
• subjs

Useful tools

• anti-burl
• getallurls
• gron
• anti-burl *
• unfurl *
• anew *
• qsreplace *
• Interlace
• Tmux
• Ripgrep

Note

• Refer to the usage of the tools as most of them require configuration (especially for subdomains enumeration).
• Please be careful with these tools and only use them on targets you have explicitly authorized.

N.B : * = added in the last update