Tools
knockpy
guelfoweb/knockpy
A modular subdomain enumeration tool that combines passive reconnaissance sources with wordlist brute force, validating HTTP/TLS responses and producing reports.
Topics
Related projects
SubDomainizer1.9kSubDomainizer finds hidden subdomains, secrets and cloud storage URLs in web pages, external JavaScript, GitHub and local folders, with passive enumeration and structured output.
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
reconftw8.4kAn automated reconnaissance tool for security researchers that chains subdomain enumeration, vulnerability scanning, OSINT, port scanning, and fuzzing into one workflow.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.
faraday6.8kFaraday is an open-source vulnerability management platform that aggregates and normalizes results from many scanners, adding multiuser collaboration, visualization, and reporting.