0x727/ShuiZe_0x727
ShuiZe 0x727
ShuiZe_0x727 is an open-source intelligence gathering framework and attack surface management tool. It functions as an asset discovery engine and cyber intelligence aggregator designed to identify internet-facing assets, map network infrastructure, and visualize total network exposure.
The project integrates vulnerability scanning and sensitive data leak detection to identify security weaknesses and unauthorized access points. It employs a combination of network space API queries, certificate log analysis, and public repository scanning to extract leaked credentials, API keys, and internal administrative paths.
The framework provides capabilities for automated information gathering and cyber intelligence research, utilizing a plugin-based scanning engine to detect vulnerabilities across web services and open ports. Gathered asset data and security findings are exported into formatted spreadsheets for offline analysis and auditing.
Features
- Attack Surface Management - Provides a comprehensive platform for discovering and monitoring internet-facing assets to manage total network exposure.
- External Asset Discovery - Functions as a discovery engine that collects subdomains, IP ranges, and DNS records to map external network infrastructure.
- Asset and Identity Intelligence - Searches and analyzes digital assets and organizational identities using network space engines.
- Information Gathering - Automates the collection of subdomains, IP addresses, and organizational metadata from public sources.
- IP and DNS Discovery - Enumerates subdomains and IP ranges by combining DNS records, certificate logs, and search engine data.
- OSINT and Information Gathering - Harvests subdomains and network metadata from public sources for open-source intelligence gathering.
- Multi-Source Content Aggregation - Merges technical data from certificate logs, DNS records, and crawlers into a single asset structure.
- DNS Record Scrape Target Discovery - Collects subdomains and root domains by scraping DNS records and third-party intelligence data.
- Infrastructure Mapping - Resolves assets to IP addresses and identifies CDN usage to visualize the target network architecture.
- Asset Inventory Aggregators - Aggregates and deduplicates discovered security assets from multiple intelligence databases into a unified inventory.
- Credential Leak Detection - Provides automated detection of leaked credentials, API keys, and sensitive paths within public repositories and search engine caches.
- OSINT Frameworks - Provides an automated framework for gathering intelligence and mapping target attack surfaces using publicly available data.
- Security Vulnerability Scanning - Detects security weaknesses and unauthorized access points in web services and open ports.
- Intelligence Querying - Queries external network space APIs to identify target assets using titles and organizational fingerprints.
- Cyber Intelligence Aggregators - Aggregates fingerprints, organizational metadata, and leaked credentials by querying multiple external network space APIs.
- Modular Scanning Engines - Employs a modular scanning engine to execute isolated vulnerability tests and port scanning routines.
- Regex Extraction Utilities - Uses regular expression sets to parse unstructured web content for leaked credentials and sensitive paths.
- Credential Extractions - Extracts leaked API keys and sensitive administrative paths from public repositories and web pages.
- Web Vulnerability Scanners - Detects security weaknesses and unauthorized access points in web services using an integrated scanning engine.
- Sensitive Data Extraction Tools - Scans public repositories and web pages to extract leaked credentials, API keys, and internal paths.
- Vulnerability Scanning Workflows - Implements structured network operations to identify security vulnerabilities across web services and open ports.
- Concurrent Request Pooling - Implements a concurrent request pipeline using pooled HTTP and DNS queries to accelerate network mapping.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
