How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Vaf is a cross-platform very advanced and fast web fuzzer written in nim
The main features of andreiverse/vaf are: Content Discovery.
Projects with overlapping indexed features include: sullo/nikto — Nikto is an open-source HTTP security auditing tool and web server vulnerability scanner. It functions as a… digination/dirbuster-ng — dirbuster-ng is C CLI implementation of the Java dirbuster tool. epi052/feroxbuster — Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and… evilsocket/dirsearch — A Go implementation of dirsearch. hakluke/hakrawler — Hakrawler is a command-line web spider tool designed for security reconnaissance, built to crawl target websites and… c-sto/recursebuster — rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments.
Nikto is an open-source HTTP security auditing tool and web server vulnerability scanner. It functions as a reconnaissance engine designed to identify insecure server options, outdated software, and common vulnerabilities by analyzing HTTP responses. The project differentiates itself through capabilities for intrusion detection evasion and web server fingerprinting. It uses request-level encoding and timing spacers to bypass security filters and employs signature-based identification to determine specific server software versions and misconfigurations. The scanner covers broad capability are
dirbuster-ng is C CLI implementation of the Java dirbuster tool
Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and directories on web servers. It functions as a recursive URL scanner that identifies unlinked endpoints and API resources by combining wordlist-based scanning with automated crawling. The tool operates as a proxy-aware fuzzer, allowing network requests to be routed through HTTP or SOCKS proxies for traffic interception or anonymity. It utilizes recursive directory crawling to automatically queue discovered paths and find nested content. The system includes capabilities for discovery
rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments