cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

ZeroScout

🦅 ZeroScout The Autonomous Local & Cloud Threat Hunter "Don't just scan files. Visualize the battlefield." 🇹🇷 Türkçe Dökümantasyon İçin Tıklayın Read in Turkish 🚀 What is ZeroScout? ZeroScout is a next-generation threat hunting framework designed for Incident Responders DFIR , SOC Analysts , and...

ElectricEye

ElectricEye ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best...

litebox

LiteBox A security-focused library OS !NOTE This project is currently actively evolving and improving. While we are working toward a stable release, some APIs and interfaces may change as the design continues to mature. You are welcome to explore and experiment, but if you need long-term stabilit...

ReconNote

ReconNote Web Application Security Recon Automation Framework It takes user input as a domain name and maximize the attack surface area by listing the assets of the domain like - Subdomains from - Amass ,findomain, subfinder & resolvable subdomains using shuffledns Screenshots Port Scan JS files...

Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

awesome-attack-surface-management

Awesome Attack Surface Management A curated list of tools, resources, and best practices for Attack Surface Management ASM, External Attack Surface Management EASM, and continuous security monitoring. Attack Surface Management is the continuous discovery, analysis, classification, and monitoring ...

PenScope

root@kitploit: ██████╗ ███████╗███╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝████╗ ██║██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ██║ ██║██████╔╝█████╗ ██╔═══╝ ██╔══╝ ██║╚██╗██║╚════██║██║ ██║ ██║██╔═══╝ ██╔══╝ ██║ ███████╗██║...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

amass

OWASP Amass Project Le projet OWASP Amass effectue la cartographie réseau des surfaces d'attaque et la découverte d'actifs externes en utilisant des techniques de collecte d'informations open source et de reconnaissance active. Installation Vous trouverez des instructions d'installation...

httpdoom

HttpDoom - Analyseur de surface d'attaque HTTP Validez de grandes surfaces d'attaque HTTP de manière très rapide et fiable. Inspiré par Aquatone. Installation Vous devez avoir le SDK dotnet version 6+ : root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source...

EasyEASM

EasyEASM Zero-dollar attack surface management tool featured at Black Hat Arsenal 2023 and Recon Village @ DEF CON 2023. Description Easy EASM is just that... the easiest to set-up tool to give your organization visibility into its external facing assets. The industry is dominated by $30k vendors...

cpanel-control-plane-exposure-check

Проверка экспонирования контрольной панели cPanel Легковесная утилита проверки безопасности для выявления доступных из интернета административных интерфейсов cPanel, WHM и webmail на внешних поверхностях атаки. Утилита выполняет проверку сервисов, классификацию экспонирования, анализ HTTP-ответов...

Puwr

Contents About Puwr Puwr Usage Port scanning Showcases Disclaimer Future Puwr Easily expand your attack surface on a local network by discovering more hosts, via SSH. Using a machine running a SSH service, Puwr uses a given subnet range to scope out IP's, sending back any successful ping requests...

sdwan-scanner-CVE-2026-20127

Cisco SD-WAN Exposure Scanner CVE-2026-20127 Специализированный инструмент пассивной идентификации, предназначенный для обнаружения доступных из интернета экземпляров Cisco SD-WAN vManage / Viptela. Этот инструмент помогает специалистам по безопасности и системным администраторам управлять своей...

RTA

Red Team Arsenal Red Team Arsenal is a inhouse framework created by flipkart security team which monitors the external attack surface of the company's online assets and provide an holistic security view of any security anomalies. It's a closely linked collection of various security engines and...

gaia

Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...

attack-surface-framework

Attack Surface Framework Vue d'ensemble ASF vise à protéger les organisations en agissant comme un chien de garde de la surface d'attaque, à condition de fournir un « Objet » qui peut être un : Domaine, Adresse IP ou CIDR Interne ou Externe. ASF découvrira les actifs/sous-domaines, énumérera leur...

attack-surface-framework

Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...

NetLogic

NetLogic Cloud-Native Attack Surface Mapper & Vulnerability Correlator — v3.0 NetLogic is a network security platform combining active port scanning, CVE correlation live NVD API, SSL/TLS analysis, HTTP security auditing, DNS/email security assessment, subdomain takeover detection, passive OSINT,...