
FinalRecon
Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

Automated web reconnaissance tool providing header analysis, DNS enumeration, subdomain discovery, directory scanning, SSL inspection, and port…

Simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names.

A fast WordPress plugin enumeration tool

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.


A fast, simple, recursive content discovery tool written in Rust.

Python3 tool that detects and exploits Local File Inclusion vulnerabilities, with crawling, path traversal and filter bypass payloads, and automated…

Automated white-hat vulnerability scanner that monitors HackerOne and Bugcrowd assets, performs subdomain enumeration, crawling, fingerprinting, and…

Automated data harvesting tool for extracting sensitive information (backups, clones, address books) from web servers via targeted scanning and…

Terminal UI for attack surface discovery: DNS recon, subdomain enumeration, port scanning, reverse IP, leaked login URLs, and JavaScript secret…

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

Automated web domain reconnaissance and security assessment tool integrating subdomain enumeration, port scanning, vulnerability scanning, and…

Pastenum is a text dump enumeration tool.

A powerful directory brute-force tool that's tailored for recursive/multiplex operations, API discovery and enumeration, JS file scraping, and lists…

Keyless active-probe security auditor for Directus CMS. Proves public-role data exposure, user enumeration, unauthenticated version/schema leaks,…