This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure mapping. It functions as a security-focused scanner that identifies hidden files, directories, parameters, and virtual hosts by injecting payloads into HTTP requests. By systematically testing how servers handle various inputs, it assists in mapping the architecture of web applications and uncovering potential security vulnerabilities. The tool distinguishes itself through a highly concurrent engine that manages asynchronous request execution and recursive job orchestration. I
Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and directories on web servers. It functions as a recursive URL scanner that identifies unlinked endpoints and API resources by combining wordlist-based scanning with automated crawling. The tool operates as a proxy-aware fuzzer, allowing network requests to be routed through HTTP or SOCKS proxies for traffic interception or anonymity. It utilizes recursive directory crawling to automatically queue discovered paths and find nested content. The system includes capabilities for discovery
Nikto is an open-source HTTP security auditing tool and web server vulnerability scanner. It functions as a reconnaissance engine designed to identify insecure server options, outdated software, and common vulnerabilities by analyzing HTTP responses. The project differentiates itself through capabilities for intrusion detection evasion and web server fingerprinting. It uses request-level encoding and timing spacers to bypass security filters and employs signature-based identification to determine specific server software versions and misconfigurations. The scanner covers broad capability are
Syzkaller is an unsupervised, coverage-guided kernel fuzzer that automatically generates and mutates system call sequences to find bugs in operating system kernels. It operates without human intervention, using a closed feedback loop of input generation, execution, crash detection, and corpus refinement to continuously explore kernel code paths. The fuzzer distinguishes itself by supporting multiple operating system kernels, including Linux, FreeBSD, and Windows, through per-platform syscall harnesses that abstract system call interfaces behind a common driver. It uses declarative description
Contextual Content Discovery Tool
Die Hauptfunktionen von assetnote/kiterunner sind: Content Discovery, Fuzzing Tools, Directory Bruteforcing, REST API Security Tools, Security Tools.
Open-Source-Alternativen zu assetnote/kiterunner sind unter anderem: epi052/feroxbuster — Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and… ffuf/ffuf — This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure… sullo/nikto — Nikto is an open-source HTTP security auditing tool and web server vulnerability scanner. It functions as a… oj/gobuster — Gobuster is a command-line security utility designed for brute-force discovery of hidden infrastructure and content.… google/syzkaller — Syzkaller is an unsupervised, coverage-guided kernel fuzzer that automatically generates and mutates system call… alebcay/awesome-shell — This project is a community-driven directory that serves as a comprehensive index of command-line tools, frameworks,…