How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.
The main features of dolevf/graphw00f are: Reconnaissance Tools, Technology Fingerprinting, GraphQL Security Tools.
Open-source alternatives to dolevf/graphw00f include: projectdiscovery/httpx — httpx is a suite of tools and libraries for HTTP reconnaissance, infrastructure discovery, and DNS resolution. It… projectdiscovery/tlsx — Fast and configurable TLS grabber focused on TLS based data collection. voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… aliasio/wappalyzer. b0bac/apolloscanner. aufzayed/hydrarecon.
Fast and configurable TLS grabber focused on TLS based data collection.
httpx is a suite of tools and libraries for HTTP reconnaissance, infrastructure discovery, and DNS resolution. It functions as a command line toolkit for extracting metadata and status codes from HTTP targets and CIDR ranges, as well as a Go library for integrating these probing capabilities into custom programs. The project distinguishes itself through specialized infrastructure profiling, using TLS fingerprinting to extract JARM hashes and certificate details. It identifies underlying components such as CDN usage, Autonomous System Numbers, and CNAMEs to map web server software and infrastr
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part