Features for security testing

[hahwul]

Noir is a tool specialized in finding endpoints. It seems that it could also provide information useful for security testing, such as parameters and tokens frequently used in XSS, SSRF, and other vulnerabilities. Providing information with tags or similar methods might be a good idea.

Like..

GET /archives.html
  ○ tags: static-page
GET /links.html
  ○ tags: static-page
GET /upload?sign=
  ○ headers: X_FORWARDED_FOR:  X_REAL_IP:
  ○ tags: ssrf, open-redirect