graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.
dolevf/graphw00f 的主要功能包括：Reconnaissance Tools, Technology Fingerprinting, GraphQL Security Tools。
dolevf/graphw00f 的开源替代品包括： projectdiscovery/httpx — httpx is a suite of tools and libraries for HTTP reconnaissance, infrastructure discovery, and DNS resolution. It… projectdiscovery/tlsx — Fast and configurable TLS grabber focused on TLS based data collection. voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… aliasio/wappalyzer. b0bac/apolloscanner. aufzayed/hydrarecon.
Fast and configurable TLS grabber focused on TLS based data collection.
httpx is a suite of tools and libraries for HTTP reconnaissance, infrastructure discovery, and DNS resolution. It functions as a command line toolkit for extracting metadata and status codes from HTTP targets and CIDR ranges, as well as a Go library for integrating these probing capabilities into custom programs. The project distinguishes itself through specialized infrastructure profiling, using TLS fingerprinting to extract JARM hashes and certificate details. It identifies underlying components such as CDN usage, Autonomous System Numbers, and CNAMEs to map web server software and infrastr
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part