Open-source alternatives to HellRaiser

尝试找出cdn背后的真实ip

webdirdig web敏感目录\信息泄漏扫描脚本

CMS识别 python gevent实现

Get website IP address by scanning the entire net 通过扫描全网绕过CDN获取网站IP地址

simple TCP banner grabbing with node.js

Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are also used to identify known…

Web Content Discovery Tool

GOWAPT is the younger brother of wfuzz a swiss army knife of WAPT, it allow pentester to perform huge activity with no stress at all, just configure it and it's just a matter of clicks.

Detect and bypass web application firewalls and protection systems

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Inforfinder is a tool made to collect information of any domain pointing at a server (ip,domain,range,file).

` / | () | () | | / | ' \ / | | ' \| '| | ' \ / | | || (| | | | | (| | | |) | | | | | | | (| | \\,|| ||\, ||./|| ||| ||\,| |/ Beta - v0.8.7 Dashboard Finder ``

@Author: xxlin @Date: 2019-04-11 20:34:14 @LastEditors: ttttmr @LastEditTime: 2019-06-03 23:49:33 -->

wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications.

w11scan是一款分布式的WEB指纹识别系统（包括CMS识别、js框架、组件容器、代码语言、WAF等等），管理员可以在WEB端新增/修改指纹，建立批量的扫描任务，并且支持多种搜索语法。

kscan is a network security scanner and service fingerprinter used to discover active hosts and open ports. It functions as a network protocol analyzer and internal network mapper to identify reachable gateways and analyze the network surface area of target environments. The tool integrates external asset discovery by retrieving target hosts through external intelligence services and verifying their availability. It also operates as a credential brute force tool, testing authentication strength across multiple protocols using automated username and password dictionaries. The project covers n

DOOMSEC DOOMSEC是在thorn上实现的分布式任务分发的ip端口漏洞扫描器

I did this tool to help me to check which security headers are enabled on certain websites.

dirsearch is a command-line security tool and web path scanner used for discovering hidden directories and files on web servers. It functions as a recursive directory fuzzer and brute-force utility that identifies undocumented paths and sensitive files using wordlists and HTTP status codes. The tool distinguishes itself through template-driven path generation and an automated HTTP response filter that uses status codes, content length, and regex patterns to isolate valid targets. It supports recursive directory crawling to map complex web structures and provides state-persistence serializatio

CyberScan is an open source penetration testing tool that can analyse packets , decoding , scanning ports, pinging and geolocation of an IP including (latitude, longitude , region , country ...)

程序只供交流，请勿用于非法用途，否则产生的一切后果自行承担！！!

A very simple way to find out which SSL ciphersuites are supported by a target.

Tool to identify if a domain has got a CMS and determine his version.

Scan-T is an open source penetration testing tool that automates the process of detecting and collecting the hosts flaws and port fingerprinting. It comes with a powerful detection engine, many nice features for the ultimate penetration tester .

Find web directories without bruteforce

this tools can be searched web leak files