A tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.

In 7 listsDetails

bundler-audit

bundler-audit is a patch-level verification tool for Bundler which checks for vulnerable versions of gems and insecure gem sources.

In 4 listsDetails

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

In 4 listsDetails

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website..

In 4 listsDetails

Wappalyzer

Instant access to website technology stacks, company and contact details, social media profiles, email verification and more

In 4 listsDetails

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.

In 3 lists

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

In 3 lists

fingerprintx

fingerprintx is a standalone utility for service discovery on open ports that works well with other popular bug bounty command line tools.

In 2 lists

WhatWeb

Found in these lists

Often listed next to it