#

attack-surface

Here are 111 public repositories matching this topic...

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

security vulnerability-detection hacktoberfest security-scanner vulnerability-assessment vulnerability-scanner dast attack-surface subdomain-takeover cve-scanner nuclei-engine

Updated Apr 22, 2026
Go

Sn1per

1N3 / Sn1per

Attack Surface Management Platform

security hacking cybersecurity penetration-testing pentesting pentest-scripts security-tools pentest-tool osint-framework attack-surface hacking-tools pentest-tools pentesting-tools sn1per sn1per-professional osint-tool bugbounty-platform attacksurface attack-surface-management

Updated Feb 15, 2026
Shell

microsoft / AttackSurfaceAnalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

security-tools attack-surface

Updated Feb 26, 2026
C#

projectdiscovery / uncover

Quickly discover exposed hosts on the internet using multiple search engines.

cli osint asm recon bugbounty hacktoberfest reconnaissance attack-surface

Updated Mar 25, 2026
Go

AttackSurfaceMapper

superhedgy / AttackSurfaceMapper

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

python osint linkedin subdomains reconnaissance attack-surface attacksurfacemapper

Updated Apr 8, 2024
Python

stanislav-web / OpenDoor

OWASP WEB Directory Scanner

owasp pentesting fingerprinting dirsearch content-discovery reconnaissance cli-tool bruteforcing attack-surface directory-bruteforce web-fuzzer proxy-rotation blackarch-packages directory-scanner path-discovery http-scanner web-security-scanner url-fuzzing

Updated Apr 23, 2026
Python

chiasmodon

chiasmod0n / chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

intelligence osint credentials emails asn cidr bugbounty subdomains information-gathering intelligence-analysis reconnaissance attack-surface subdomain-enumeration reconnaissance-framework bugbounty-tool email-enumeration chiasmodon

Updated May 10, 2025
Python

3nock / OTE

OSINT Template Engine

gui qt osint cplusplus hacking qt5 subdomain cybersecurity infosec recon information-gathering intelligence-gathering security-tools reconnaissance footprinting attack-surface

Updated Jul 20, 2023
C

attacksurge / awesome-attack-surface-monitoring

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.

bugbounty scanners pentest-tool attack-surface

Updated Oct 9, 2024

vmfunc / sif

the blazing-fast pentesting suite.

security cybersecurity infosec pentesting pentest vulnerability-detection cve-scanning hacktoberfest vulnerability-scanners directory-enumeration pentest-scripts pentest-tool attack-surface dirlist dns-enumeration cve-scanner

Updated Apr 17, 2026
Go

BishopFox / smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️

aws cloud api-documentation penetration-testing infosec blueteam security-tools cloud-security attack-surface amazonaws security-engineer

Updated Jul 20, 2020
Go

kosty-cloud / kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

python aws devops cloud api-gateway iam waf bedrock privilege-escalation devsecops cloud-security cost-optimization attack-surface aws-audit sagemaker finops

Updated Apr 23, 2026
Python

webstor

RossGeerlings / webstor

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

security cybersecurity infosec pentesting recon bugbounty pentest-scripts information-gathering security-tools reconnaissance footprinting attack-surface pentest-tools pentesting-tools bugbounty-tool

Updated Mar 31, 2024
Python

cloud_osint

7WaySecurity / cloud_osint

☁️ Curated Cloud OSINT resources — dorks, tools, and techniques for AWS, Azure, GCP, Oracle Cloud, and other major providers reconnaissance

Updated Apr 8, 2026

1N3 / AttackSurfaceManagement

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

osint cybersecurity penetration-testing bugbounty automated vulnerability-management hacking-tool vulnerability-scanners reconnaissance penetration-testing-framework attack-surface hacking-tools penetration-testing-tools bugbounty-platform attacksurface bugbounty-tool redteam-tools

Updated Sep 27, 2021
Shell

praetorian-inc / vespasian

API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs

graphql golang soap wsdl openapi traffic-analysis penetration-testing application-security security-tools api-discovery api-security attack-surface headless-browser capability openapi-generator burp-suite api-specification api-enumeration

Updated Apr 23, 2026
Go

praetorian-inc / julius

Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds

golang security-scanner reconnaissance attack-surface ai-security capability service-detection vllm llm-security llm-tools ollama llm-evaluation llm-pentesting llm-fingerprinting

Updated Apr 23, 2026
Go

owasp-amass / amass-docker-compose

OWASP Amass Docker Compose for setting up a full instance of the infrastructure

docker-compose asm discovery scouting owasp visibility recon attack-surface internet-security attack-surface-management

Updated Apr 7, 2026

TalMaIka / Site-Scanner

Site-Scanner - Web application vulnerability assessment tool.

security penetration-testing xss-exploitation vulnerability-detection pentest-scripts security-tools sqlinjection cms-detector attack-surface hacking-tools cybersecurity-tools admin-login-detector

Updated Jul 30, 2024
Python

HackingLZ / saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

python osint enumeration bug-bounty reconnaissance security-research attack-surface dns-enumeration saas-discovery

Updated Jul 23, 2025
Python

Improve this page

Add a description, image, and links to the attack-surface topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the attack-surface topic, visit your repo's landing page and select "manage topics."