The recursive internet scanner for hackers. 🧡
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
Pentesting automation platform that combines hacking tools to complete assessments
一个基于网络空间搜索引擎的攻击面管理平台，可定时进行资产信息爬取，及时发现新增资产，本项目聚合了 Fofa、Hunter、Quake、Zoomeye 和 Threatbook 的数据源，并对获取到的数据进行去重与清洗
AI-powered open-source platform for Attack Surface Management (OASM)
Marshal-EASM 攻击面管理系统-社区版
Red Kite, the Extensible Attack Surface Management tool.
External attack surface monitoring & vulnerability automation
Tool for automated scanning of the common vulnerabilities of company subdomains
Ardra is an all-in-one External Attack Surface Management (EASM) tool that helps identify and assess security risks by automating subdomain discovery, vulnerability scanning, DNS analysis, and app security testing.
🕵️ Purely passive OSINT/EASM/CTEM platform — 15+ data sources, zero-touch asset discovery, risk detection
secrets.wtf: defensive AI infrastructure exposure index for Ollama and LM Studio hosts, local LLM APIs, model observations, remediation, and takedown requests.
The repository contains detailed explanation and working flow of an lightweight EASM tool which integrates the attack surface information into the splunk
Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.
⚡ Automate penetration testing tasks to streamline security assessments and enhance efficiency, allowing security professionals to focus on vital analysis.