TideSec/TscanPlus
TscanPlus
TscanPlus is an external attack surface management tool and security reconnaissance framework designed for discovering network assets, enumerating subdomains, and mapping internet-facing services. It functions as a vulnerability scanning framework and network asset discovery suite to identify security exposure and map active hosts.
The platform distinguishes itself by integrating an intelligence layer that uses large language models to analyze raw scan results and identify security weaknesses within JavaScript code. It also includes a dedicated proxy management system that validates and rotates HTTP and SOCKS5 proxies to bypass rate limits and avoid IP blocking.
The toolkit covers broad capability areas including web application reconnaissance through recursive crawling and directory enumeration, as well as red team utilities for brute-forcing credentials and generating reverse shell payloads. It further provides tools for validating tokens, performing cryptographic processing, and managing sequential security workflows.
Features
- Attack Surface Management - Provides a platform for discovering, inventorying, and monitoring internet-facing assets to map total network exposure.
- Network Asset Discovery - Implements a comprehensive suite for mapping network surfaces and identifying live hosts through port scanning and subdomain enumeration.
- JavaScript Security Analysis - Integrates large language models to analyze raw scan results and identify security weaknesses in JavaScript code.
- Vulnerability Scanning - Tests target systems against a library of proofs-of-concept and integrates with external vulnerability scanners.
- Vulnerability Scanning and Analysis - Uses large language models to provide intelligent automated interpretation of security vulnerabilities in scan results.
- Web Reconnaissance - Enumerates subdomains and hidden directories via recursive crawling to uncover API endpoints and sensitive files.
- Internet-Facing Asset Discovery - Identifies live hosts and open ports across IP ranges to build a comprehensive inventory of active services.
- Network Asset Scanning - Identifies live hosts and services through IP port scanning and subdomain enumeration.
- HTTP Proxy Pool Managers - Manages and rotates a validated pool of HTTP and SOCKS5 proxies to bypass network restrictions.
- Proxy Connectivity Testing - Tests proxy connectivity against custom websites and automatically removes failing servers from the pool.
- Proxy Management - Manages a collection of HTTP and SOCKS5 proxies with rotation and validation to maintain anonymity.
- Proxy Management Systems - Ships a routing engine that validates and rotates HTTP and SOCKS5 proxies to bypass rate limits and IP blocking.
- Proxy Pool Automation - Automates the import and scraping of proxy servers from security search engines to populate a usable pool.
- Proxy Rotation Services - Implements automated rotation of proxy servers based on usage and latency to bypass IP blocking.
- Proxy and Fingerprint Rotation - Automates the rotation of proxy servers and fingerprints to avoid IP blocking and rate limits.
- Traffic Proxying - Manages the routing of outbound traffic through a validated pool of proxies to avoid rate limits.
- Asset Inventory Aggregators - Consolidates discovered security assets from multiple intelligence sources into a centralized inventory.
- Security Reconnaissance Tools - Provides a framework for gathering asset intelligence and analyzing attack surfaces via fingerprinting and recursive web crawling.
- Security Vulnerability Scanning - Detects security weaknesses using a library of proofs-of-concept and integrated vulnerability scanning tools.
- Vulnerability Scanning Frameworks - Provides a framework that tests targets against proof-of-concept libraries and integrates external scanners to identify security flaws.
- Service Fingerprinting - Identifies specific software versions and applications by matching network responses against known fingerprints.
- LLM-Based Analysis - Provides an intelligence layer that leverages large language models to analyze JavaScript code and interpret scan results for security weaknesses.
- Vulnerability Scanning Workflows - Organizes discovery and scanning tasks into sequential, project-based workflows to identify and validate vulnerabilities.
- LLM Analyzers - Integrates LLM-driven analysis to interpret discovered vulnerabilities and evaluate security weaknesses in JavaScript code.
- Recursive Crawl Discoverers - Recursively crawls websites to discover hidden API endpoints and URLs within script files.
- URL Extraction - Extracts hidden API endpoints and sensitive URLs by analyzing web pages and JavaScript files.
- Directory Fuzzing - Implements automated discovery of hidden files and directories using wordlist-based fuzzing.
- Sequential Workflows - Organizes security reconnaissance and scanning tasks into sequential, project-based stages.
- Red Teaming Frameworks - Integrates red team utilities for generating payloads and managing security tasks in a unified workspace.
- Payload Generators - Generates ready-to-use reverse shell and lateral movement payloads tailored to the detected operating system.
- Security Fuzzing Engines - Provides a security-focused fuzzing engine to locate hidden web resources and directories.
- Scan Result Analyzers - Provides intelligent analysis of raw scan results and JavaScript code using large language models to identify security weaknesses.
- Security Workflow Integrations - Automates the transition of data between different reconnaissance and scanning tools in a sequential workflow.
- Reverse Shell Payloads - Generates ready-to-use reverse shell and lateral movement commands based on the target environment.
- Web Directory Enumeration Tools - Discovers hidden files and folders on web servers using dictionary-based brute-force scanning.
