attack-surface

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

intelligence osint credentials emails asn cidr bugbounty subdomains information-gathering intelligence-analysis reconnaissance attack-surface subdomain-enumeration reconnaissance-framework bugbounty-tool email-enumeration chiasmodon

Updated Sep 24, 2024
Python

johnnyxmas / ScanCannon

Star

External attack surface discovery, enumeration and reconnaissance for massive networks

enumeration penetration-testing pentesting hacking-tool reconnaissance asset-management attack-surface asset-inventory

Updated Apr 23, 2024
Shell

BishopFox / smogcloud

Star

Find cloud assets that no one wants exposed 🔎 ☁️

aws cloud api-documentation penetration-testing infosec blueteam security-tools cloud-security attack-surface amazonaws security-engineer

Updated Jul 20, 2020
Go

attacksurge / awesome-attack-surface-monitoring

Star

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.

bugbounty scanners pentest-tool attack-surface

Updated Sep 6, 2024

RossGeerlings / webstor

Star

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

security cybersecurity infosec pentesting recon bugbounty pentest-scripts information-gathering security-tools reconnaissance footprinting attack-surface pentest-tools pentesting-tools bugbounty-tool

Updated Mar 31, 2024
Python

lunchcat / sif

Star

🚀 blazing-fast pentesting suite written in Go

security cybersecurity infosec pentesting pentest vulnerability-detection cve-scanning hacktoberfest vulnerability-scanners directory-enumeration pentest-scripts pentest-tool attack-surface dirlist dns-enumeration cve-scanner

Updated Jul 29, 2024
Go

1N3 / AttackSurfaceManagement

Star

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

osint cybersecurity penetration-testing bugbounty automated vulnerability-management hacking-tool vulnerability-scanners reconnaissance penetration-testing-framework attack-surface hacking-tools penetration-testing-tools bugbounty-platform attacksurface bugbounty-tool redteam-tools

Updated Sep 27, 2021
Shell

Krypteria / Seekolver

Star

Seekolver is a tool focused on attack-surface mapping. It performs searches for subdomains associated with root domains and root domains associated with organisations using open sources, additionally, it resolves these domains and subdomains in search of HTTP and HTTPS services and then filters the information obtained based on their response.

python dns osint domain-scanner information-gathering subdomain-scanner attack-surface osint-reconnaissance

Updated Dec 11, 2023
Python

lightspin-tech / lightspin-2022-top-7-attack-paths

Star

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.