NetLogic

NetLogic Mapper di Superficie d'Attacco Cloud-Native & Correlatore di Vulnerabilità — v3.0 NetLogic è una piattaforma di sicurezza di rete che combina scansione attiva delle porte, correlazione CVE tramite API NVD live, analisi SSL/TLS, audit di sicurezza HTTP, valutazione della sicurezza...

GWTMap

Descrição GWTMap é uma ferramenta para ajudar a mapear a superfície de ataque de aplicações baseadas em Google Web Toolkit GWT. O objetivo desta ferramenta é facilitar a extração de quaisquer endpoints de métodos de serviço enterrados no código do lado do cliente ofuscado de uma aplicação GWT...

frogy2.0

Orbis - Intelligence sulla Superficie d'Attacco Intelligence sulla Superficie d'Attacco a Spettro Completo Orbis mappa automaticamente l'intera superficie d'attacco esposta su internet della tua organizzazione: sottodomini, porte aperte, applicazioni web, infrastruttura cloud, certificati TLS,...

amass

Progetto OWASP Amass Il Progetto OWASP Amass esegue la mappatura di rete delle superfici di attacco e la scoperta di risorse esterne utilizzando tecniche di raccolta informazioni open source e ricognizione attiva. Installazione Puoi trovare ulteriori istruzioni di installazione e documentazione n...

ReconNote

ReconNote Framework de Automação de Reconhecimento de Segurança de Aplicações Web Ele recebe um nome de domínio como entrada e maximiza a superfície de ataque listando os ativos do domínio, como - Subdomínios de - Amass, findomain, subfinder e subdomínios resolvíveis usando shuffledns Capturas de...

OTE

OSINT Template Engine OSINT Template Engine is an experimental tool for OSINT Information gathering & Attack Surface Mapping which uses customizable templates to collect data from sources. It allows for new template creation and modification of existing ones which gives it a competitive advantage...

PenScope

██████╗ ███████╗███╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝████╗ ██║██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ██║ ██║██████╔╝█████╗ ██╔═══╝ ██╔══╝ ██║╚██╗██║╚════██║██║ ██║ ██║██╔═══╝ ██╔══╝ ██║ ███████╗██║...

What Is Attack Surface Mapping And Why It’s Critical To your Security Program

You might think an attack surface mapper is just another name for a vulnerability scanner, but they serve two very different purposes. A scanner tests the assets you already know about for specific weaknesses. An attack surface mapper answers a more fundamental question: What assets do I even hav...

A Practical Guide to Attack Surface Intelligence Mapping

Think of your organization’s digital presence as a sprawling, ever-expanding city. New buildings servers go up, old ones are forgotten, and unofficial shortcuts shadow IT appear overnight. Trying to defend this city without a current map is impossible. You’re left reacting to alarms instead of...

SpiderSuite - Advance Web Spider/Crawler For Cyber Security Professionals

An advance cross-platform and multi-feature GUI web spider/crawler for cyber security proffesionals. Spider Suite can be used for attack surface mapping and analysis. For more information visit SpiderSuite's website. Installation and Usage Spider Suite is designed for easy installation and usage...

Sub3Suite - A Free, Open Source, Cross Platform Intelligence Gathering Tool

Sub3 Suite is a research-grade suite of tools for Subdomain Enumeration, OSINT Information gathering & Attack Surface Mapping. Supports both manual and automated analysis on variety of target types with many available features & tools. For more information checkout the documentation Screenshots...

Sigurlx - A Web Application Attack Surface Mapping Tool

sigurlx a web application attack surface mapping tool, it does ...: Categorize URLs URLs' categories: endpoint js js style css data json|xml|csv archive zip|tar|tar.gz doc pdf|xlsx|doc|docx|txt media jpg|jpeg|png|ico|svg|gif|webp|mp3|mp4|woff|woff2|ttf|eot|tif|tiff Next, probe HTTP requests to th...

Applied ThreadFix: Seeding Your Application Portfolio with OWASP Amass

OWASP Amass is a great tool for asset discovery and enterprise attack surface mapping. It pulls data from a number of different data sources and identifies potential hosts and applications associated with organizations, domains, IP CIDRs and other identifiers. As we have noted, having a solid...

Sifter - A OSINT, Recon And Vulnerability Scanner

Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit...

Striker - Offensive Information And Vulnerability Scanner

Striker is an offensive information and vulnerability scanner. Features Just supply a domain name to Striker and it will automatically do the following for you: Check and Bypass Cloudflare Retrieve Server and Powered by Headers Fingerprint the operating system of Web Server Detect CMS 197+ CMSs a...