The recursive internet scanner for hackers. 🧡

Attack Surface Management Platform

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

A Modern Orchestration Engine for Security

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

An easy-to-use and lightweight API wrapper for Censys APIs.

网络资产攻击面梳理

Zero-dollar attack surface management tool

A list of cloud security tools and vendors.

Self-hosted passive subdomain continous monitoring tool.

Red Kite, the Extensible Attack Surface Management tool.

Open-source platform for cybersecurity Attack Surface Management (OASM).

Origin IP scanning utility developed with ChatGPT

BlueTeam, RedTeam, Bug bounty, CTI, OSINT, Threat Hunting, Network and Web Recon, Discovery, Enumeration, Vulnerability Mapping, Exploitation, Reporting, Darkweb, Deepweb, Research

OWASP Amass Docker Compose for setting up a full instance of the infrastructure

List of MurmurHash3 favicon hashes of widely used technologies by vendor to search with Shodan.

Manage attack surface data on Elasticsearch

Python Client to LeakIX API

Nuclei template generator for WordPress plugins

Database interaction layer to store the Open Asset Model in a database management system

Open Source ASPM Platform

Network scanner that maps infrastructure into a Neo4j graph and executes natural-language security operations via AI agents.

CISO360.AI

Grab valid subdomains, resolve them, split them and more!

Project Context Clues aim to vectorize CyberOps recon and threat intel data for AI driven systems.

AssetX helps streamline reconnaissance and vulnerability scanning workflows.

Workshop that shows how to build your own ASM recon on external and cloud assets. Presented at HackGDL 2024.

Custom Integrations for the runZero Exposure Management Platform