attack-surface

Star

Here are 41 public repositories matching this topic...

Language:All

Filter by language

All41 Python14 Go9 Shell8 C2 C#1 Dart1 PowerShell1

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

projectdiscovery /nuclei

Star22.7k

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

security vulnerability-detection hacktoberfest security-scanner vulnerability-assessment vulnerability-scanner dast attack-surface subdomain-takeover cve-scanner nuclei-engine

UpdatedMar 25, 2025
Go

1N3 /Sn1per

Star8.6k

Attack Surface Management Platform

security hacking cybersecurity penetration-testing pentesting pentest-scripts security-tools pentest-tool osint-framework attack-surface hacking-tools pentest-tools pentesting-tools sn1per sn1per-professional osint-tool bugbounty-platform attacksurface attack-surface-management

UpdatedFeb 28, 2025
Shell

j3ssie /osmedeus

Sponsor

Star5.5k

A Workflow Engine for Offensive Security

go golang security osint hacking penetration-testing bug-bounty pentesting bugbounty scanning hacking-tool information-gathering security-tools reconnaissance pentest-tool attack-surface attack-surface-management

UpdatedFeb 6, 2025
Go

microsoft /AttackSurfaceAnalyzer

Star2.8k

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

security-tools attack-surface

UpdatedFeb 18, 2025
C#

projectdiscovery /uncover

Star2.5k

Quickly discover exposed hosts on the internet using multiple search engines.

cli osint asm recon bugbounty reconnaissance attack-surface

UpdatedMar 13, 2025
Go

superhedgy /AttackSurfaceMapper

Star1.3k

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

python osint linkedin subdomains reconnaissance attack-surface attacksurfacemapper

UpdatedApr 8, 2024
Python

chiasmod0n /chiasmodon

Star557

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

intelligence osint credentials emails asn cidr bugbounty subdomains information-gathering intelligence-analysis reconnaissance attack-surface subdomain-enumeration reconnaissance-framework bugbounty-tool email-enumeration chiasmodon

UpdatedSep 24, 2024
Python

3nock /OTE

Star537

OSINT Template Engine

gui qt osint cplusplus hacking qt5 subdomain cybersecurity infosec recon information-gathering intelligence-gathering security-tools reconnaissance footprinting attack-surface

UpdatedJul 20, 2023
C

johnnyxmas /ScanCannon

Star444

External attack surface discovery, enumeration and reconnaissance for massive networks

enumeration penetration-testing pentesting hacking-tool reconnaissance asset-management attack-surface asset-inventory

UpdatedMar 7, 2025
Shell

attacksurge /awesome-attack-surface-monitoring

Star381

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.

bugbounty scanners pentest-tool attack-surface

UpdatedOct 9, 2024

BishopFox /smogcloud

Star338

Find cloud assets that no one wants exposed 🔎 ☁️

aws cloud api-documentation penetration-testing infosec blueteam security-tools cloud-security attack-surface amazonaws security-engineer

UpdatedJul 20, 2020
Go

lunchcat /sif

Star230

the blazing-fast pentesting suite.

security cybersecurity infosec pentesting pentest vulnerability-detection cve-scanning hacktoberfest vulnerability-scanners directory-enumeration pentest-scripts pentest-tool attack-surface dirlist dns-enumeration cve-scanner

UpdatedDec 2, 2024
Go

RossGeerlings /webstor

Star156

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

security cybersecurity infosec pentesting recon bugbounty pentest-scripts information-gathering security-tools reconnaissance footprinting attack-surface pentest-tools pentesting-tools bugbounty-tool

UpdatedMar 31, 2024
Python

1N3 /AttackSurfaceManagement

Star93

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

osint cybersecurity penetration-testing bugbounty automated vulnerability-management hacking-tool vulnerability-scanners reconnaissance penetration-testing-framework attack-surface hacking-tools penetration-testing-tools bugbounty-platform attacksurface bugbounty-tool redteam-tools

UpdatedSep 27, 2021
Shell

TalMaIka /Site-Scanner

Star48

Site-Scanner - Web application vulnerability assessment tool.

security penetration-testing xss-exploitation vulnerability-detection pentest-scripts security-tools sqlinjection cms-detector attack-surface hacking-tools cybersecurity-tools admin-login-detector

UpdatedJul 30, 2024
Python

Krypteria /Seekolver

Star39

Seekolver is a tool focused on attack-surface mapping. It performs searches for subdomains associated with root domains and root domains associated with organisations using open sources, additionally, it resolves these domains and subdomains in search of HTTP and HTTPS services and then filters the information obtained based on their response.

python dns osint domain-scanner information-gathering subdomain-scanner attack-surface osint-reconnaissance

UpdatedDec 11, 2023
Python

lightspin-tech /lightspin-2022-top-7-attack-paths

Star39

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

ttps aws-security cloudsecurity cloud-security attack-surface azure-security mitre-attack gcp-security attack-paths azuresecurity awssecurity