- https://github.com/projectdiscovery/subfinder – a subdomain discovery tool
- https://github.com/owasp-amass/amass – asset discovery
- https://github.com/nmap/nmap – port enumiration
- https://github.com/projectdiscovery/httpx – HTTP toolkit (server discovery)
- https://github.com/tomnomnom/waybackurls – discover known URLs from Wayback Machine
- https://github.com/lc/gau – discover known URLs from Wayback Machine and so on
- https://github.com/trufflesecurity/trufflehog – secrets detection
- https://github.com/projectdiscovery/nuclei – known vulnerabilities
- https://github.com/ffuf/ffuf + https://github.com/danielmiessler/SecLists/tree/master/Discovery/Web-Content – discover hidden folders
- https://github.com/OJ/gobuster – discover hidden folders
Created
June 28, 2023 07:17
-
-
Save Kirill89/370b73d532b804c702f9853cc7c33544 to your computer and use it in GitHub Desktop.
Useful recon tools
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment