Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Attack Surface Management Platform

A Workflow Engine for Offensive Security

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

Quickly discover exposed hosts on the internet using multiple search engines.

Discover Your Attack Surface!

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

OSINT Template Engine

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

External attack surface discovery, enumeration and reconnaissance for massive networks

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.

Find cloud assets that no one wants exposed 🔎 ☁️

the blazing-fast pentesting suite.

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

Seekolver is a tool focused on attack-surface mapping. It performs searches for subdomains associated with root domains and root domains associated with organisations using open sources, additionally, it resolves these domains and subdomains in search of HTTP and HTTPS services and then filters the information obtained based on their response.

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

Minimal web server enumeration & attack surface detection tool based on results of nmap.

Site-Scanner - Web application vulnerability assessment tool.

OWASP Amass Docker Compose for setting up a full instance of the infrastructure