attacksurface 开源项目推荐（24 个）

smicallef /spiderfoot

SpiderFoot 可自动化 OSINT，用于威胁情报和绘制攻击面。

1N3 /Sn1per

自动化渗透测试与攻击面管理平台。侦察、扫描、利用、报告——600+ 漏洞利用、90+ 集成、10K+ 检测。

1N3 /AttackSurfaceManagement

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

anmolksachan /WayBackupFinder

A passive way to find backups/ sensitive information.

whiterabb17 /sifter

Sifter - All purpose penetration testing op-center

Hunterdii /Awesome-Hacking

🔐 Welcome to Hack-Academia, your ultimate resource hub for all things 🖥️ hacking, 🔧 pentesting, and 🛡️ security research. Whether you are a 🌱 beginner looking to explore the world of cybersecurity or a 🧑‍💻 seasoned professional seeking cutting-edge techniques and insights, Hack-Academia is here to empower you. ⚡

Viralmaniar /DDWPasteRecon

DDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team to gain situational awareness of the organisation's web exposure on the pastesites. It Utilises Google's indexing of pastesites to gain targeted intelligence of the organisation. Blue & SOC teams can…

uttambodara /CyberElite

🔐 Welcome to Hack-Academia — your go-to destination for everything related to 🖥️ ethical hacking, 🔧 penetration testing, and 🛡️ cybersecurity research. Whether you're a 🌱 newcomer eager to dive into the cyber world or a 🧑‍💻 skilled expert searching for the latest tools and tactics, Hack-Academia is here to fuel your journey. ⚡

owasp-amass /homebrew-amass

The OWASP Amass Homebrew Formula

raajheshkannaa /attack-surface-management

Continuous External Attack Surface Discovery & Vulnerability Scanning Across AWS Organizations — Python CDK

Icex0 /awsleaks

AWS security scanner that finds hardcoded secrets and internet-exposed resources across all regions and 30+ AWS services.

WebAppPentestGuidelines /ASMGuidance

ASM導入検討を進めるためのガイダンス（基礎編）

0x4f53 /textsubs

A simple Golang library to extract subdomains from any piece of text.

rxerium /internal-security-detect

The detection of internal security controls at a company

Kubenew /Osint-Harvester

Osint Harvester is a lightweight OSINT toolkit that collects and normalizes intelligence from multiple sources.

exfil0 /dynamic_enum_wizard

Dynamic_enum_Wizard is a curses-based wizard that conducts a wide range of security reconnaissance tasks while keeping the terminal output to a minimum.

sansjtw1 /Z-Sans

Automated Asset Collection System Based on Asset Breeding Engine

Pushpenderrathore /Sn1per

Attack Surface Management Platform

CoC-MS /ALSO-Microsoft-Security-AI-Security-Windows11

This baseline delivers a hardened Windows 11 configuration that minimizes the risk of unauthorized third-party AI access while maintaining a productive user experience

CoC-MS /ALSO-Microsoft-Security-WindowsServer

A collection of Microsoft Security Windows Server policies to help organizations accelerate secure deployments to servers with Defender for Servers (Defender for Cloud), Defender Business for Servers and Endpoint for Servers with Intune.