AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
-
Updated
Apr 8, 2024 - Python
#
attack-surface
Here are 85 public repositories matching this topic...
OWASP Web Recon & Directory Discovery Platform
pentesting fingerprinting dirsearch content-discovery reconnaissance cli-tool bruteforcing wordlists attack-surface directory-bruteforce web-fuzzer proxy-rotation waf-detection url-bruteforcer directory-scanner path-discovery http-scanner web-security-scanner url-fuzzing tunnel-scan
-
Updated
Jul 13, 2026 - Python
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.
intelligence osint credentials emails asn cidr bugbounty subdomains information-gathering intelligence-analysis reconnaissance attack-surface subdomain-enumeration reconnaissance-framework bugbounty-tool email-enumeration chiasmodon
-
Updated
May 10, 2025 - Python
Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.
python aws devops cloud api-gateway iam waf bedrock privilege-escalation devsecops cloud-security cost-optimization attack-surface aws-audit sagemaker finops
-
Updated
Apr 26, 2026 - Python
WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.
security cybersecurity infosec pentesting recon bugbounty pentest-scripts information-gathering security-tools reconnaissance footprinting attack-surface pentest-tools pentesting-tools bugbounty-tool
-
Updated
Mar 31, 2024 - Python
Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.
devops mcp static-analysis owasp appsec security-scanner sarif devsecops ai-agents attack-surface ai-security rag github-action cyclonedx supply-chain-security llm ai-governance pr-review llm-security ai-bom
-
Updated
Jul 9, 2026 - Python
Site-Scanner - Web application vulnerability assessment tool.
security penetration-testing xss-exploitation vulnerability-detection pentest-scripts security-tools sqlinjection cms-detector attack-surface hacking-tools cybersecurity-tools admin-login-detector
-
Updated
Jul 30, 2024 - Python
Command-line tool for discovering SaaS platforms a company uses via DNS enumeration
python osint enumeration bug-bounty reconnaissance security-research attack-surface dns-enumeration saas-discovery
-
Updated
Jul 23, 2025 - Python
Seekolver is a tool focused on attack-surface mapping. It performs searches for subdomains associated with root domains and root domains associated with organisations using open sources, additionally, it resolves these domains and subdomains in search of HTTP and HTTPS services and then filters the information obtained based on their response.
python dns osint domain-scanner information-gathering subdomain-scanner attack-surface osint-reconnaissance
-
Updated
Dec 11, 2023 - Python
Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discovered endpoints and tracks whether their parameters are actually tested in Burp Suite. This helps highlight untested attack surfaces and provides clear visibility of coverage for security teams.
bug-bounty pentesting bugbounty burp-extensions web-application-security security-testing api-security attack-surface burp-suite attack-surface-management api-security-testing burp-extension security-testing-tool
-
Updated
Mar 16, 2026 - Python
OSINT tool for precise version fingerprinting of open-source web software
python cli osint pentesting fingerprinting cve security-tools reconnaissance vulnerability-scanner security-research attack-surface cms-detection web-fingerprinting version-detection osint-tool
-
Updated
Jul 13, 2026 - Python
Passive attack-surface scanner: turn a domain into a risk grade, copy-paste fixes, and a client-ready report. Safe DNS, HTTP, TLS, email, and certificate-transparency checks.
python dns tls cli security osint spf certificate-transparency infosec dane dmarc hacktoberfest security-scanner email-security security-tools devsecops attack-surface subdomain-takeover domain-security passive-recon
-
Updated
Jul 1, 2026 - Python
Intelligence-driven reconnaissance framework for bug bounty hunters and security professionals.
osint bug-bounty web-security pentesting nuclei bugbounty reconnaissance security-research endpoint-discovery attack-surface subdomain-enumeration
-
Updated
Jul 11, 2026 - Python
Modular OSINT and attack surface analysis platform for authorized security research, with risk scoring, attack paths, and report generation.
flask reporting python3 cybersecurity pentesting bugbounty reconnaissance security-research attack-surface threat-intelligence-platform osint-tool
-
Updated
Jun 4, 2026 - Python
ssb=simple subdomain bruteforcer
dns ftp smb service-discovery hacking python3 enumeration pentesting bugbounty smb2 hacking-tool rpcbind bruteforce-password-cracker http-methods subdomain-scanner attack-surface ssh-bruteforce anonymous-credentials file-discovery telnet-hacking
-
Updated
Mar 10, 2023 - Python
Self-hosted external attack surface scanner. Subdomain enumeration + takeover detection, ports, CVEs, TLS, SSH, web vulns, EPSS/KEV prioritisation. 19 tools, 12 attack vectors, one `docker run`. MIT-licensed.
docker security django osint self-hosted nmap infosec pentesting recon nuclei red-team security-tools pentest-tool vulnerability-scanner subfinder attack-surface subdomain-takeover defender-tools easd attack-surface-detection
-
Updated
Jul 13, 2026 - Python
Cent Nuclei Templates generated through the cent tool.
security nuclei vulnerability-detection security-scanner vulnerability-assessment vulnerability-scanner attack-surface subdomain-takeover nuclei-templates cve-scanner nuclei-engine
-
Updated
Jun 15, 2026 - Python
fully autonomous credential intelligence platform that discovers, │ │ extracts, correlates, verifies, and reports exposed secrets across your │ │ target's entire attack surface.
python secrets enumeration bug-bounty security-tools devsecops attack-surface cloud-security-audit secret-scanner credential-scanning
-
Updated
May 10, 2026 - Python
A learning-focused yet production-structured Attack Surface Monitoring engine emphasizing clarity, scope control, and explainable risk assessment.
-
Updated
Dec 28, 2025 - Python
A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability (CVE-2024-55591) in certain Fortinet devices.
-
Updated
May 26, 2025 - Python
Improve this page
Add a description, image, and links to the attack-surface topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the attack-surface topic, visit your repo's landing page and select "manage topics."