How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
OWASP ZAP is a dynamic application security testing tool and intercepting HTTP proxy used to find vulnerabilities in web applications. It functions as a penetration testing framework that enables both automated security scanning and manual security testing of running web services. The tool provides a suite of capabilities for analyzing web applications from the outside in, including the ability to capture and modify traffic between a browser and a target application. It is designed to integrate into DevSecOps pipelines to provide consistent security checks across different environments.
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
recon-ng is an open source intelligence reconnaissance framework designed to automate the collection and aggregation of public information. It is a modular intelligence tool that utilizes a system of pluggable modules to harvest target data, resolve DNS queries, and parse web content. The framework is built as an API-driven tool with a programmatic interface to integrate with other security workflows. It is provided as a containerized application, using Docker to ensure a consistent environment for running reconnaissance tasks and managing a persistent data store. Its capabilities cover exte
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
The main features of spectralops/keyscope are: Open Source Intelligence, Web Security Tools, Secrets Management, Web Security Testing.
Projects with overlapping indexed features include: codingo/vhostscan — A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work… zaproxy/zaproxy — OWASP ZAP is a dynamic application security testing tool and intercepting HTTP proxy used to find vulnerabilities in… nil0x42/phpsploit — Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor. hightechsec/git-scanner — A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public. lanmaster53/recon-ng — recon-ng is an open source intelligence reconnaissance framework designed to automate the collection and aggregation… sqlmapproject/sqlmap — This project is an automated security testing suite designed to detect and exploit database vulnerabilities. It…