Discovery | Vulnerability | |
---|---|---|
nmap | wp-scan | |
knock | owasp zap | |
robtex | prowler | |
shodan.io | wp-scan | |
centralops.net | nuclei |
Discovery
nmap
Nmap (“Network Mapper”) is a free and open source utility for network discovery and security auditing.
Knock
Knockpy is a python3 tool designed to quickly enumerate subdomains on a target domain through dictionary attack.
docker run -ti --rm secsi/knockpy $domain
robtex
robtex is a website that will help you identify if a specific IP address may have multiple domains attached to it.
shodan
showdan.io can identify if an IP address has known vulnerabilities recorded.
centralops
centralops.net is a tool to do DNS lookups against a DNS name.
Vulnerability
wp-scan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.
docker run -it --rm wpscanteam/wpscan --url https://$domain
owasp zap
Zed Attack Proxy (ZAP) is a free, open-source penetration testing tool being maintained under the umbrella of the Open Web Application Security Project (OWASP). ZAP is designed specifically for testing web applications and is both flexible and extensible.
docker run -ti owasp/zap2docker-weekly zap-baseline.py -t https://$domain
prowler
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custome security frameworks.
docker run -ti --rm --name prowler --env AWS_ACCESS_KEY_ID --env AWS_SECRET_ACCESS_KEY --env AWS_SESSION_TOKEN --env AWS_PROFILE toniblyx/prowler:latest
nuclei
nuclei is used to send requests across targets based on a template, leading to zero false positives and providing fast scanning on a large number of hosts. Nuclei offers scanning for a variety of protocols, including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless etc. With powerful and flexible templating, Nuclei can be used to model all kinds of security checks.