attack-surface-management

There are 19 repositories under attack-surface-management topic.

Sn1per
1N3 / Sn1per
Attack Surface Management Platform
sn1per sn1per-professional bugbounty-platform attack-surface cybersecurity pentest-tool pentesting-tools pentest-scripts pentest-tools hacking-tools osint-tool osint-framework attacksurface penetration-testing pentesting security-tools attack-surface-management hacking security
Language:Shell 9193
blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
hacking neo4j osint osint-framework python subdomain-enumeration automation recon cli scanner bugbounty pentesting recursion subdomain-scanner subdomains asm attack-surface-management threat-intelligence threatintel easm
Language:Python 9101
cloudquery
cloudquery / cloudquery
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
aws gcp azure sql data-integration elt etl etl-framework bigquery data-collection data-engineering kubernetes data airbyte github-api data-analysis google go cspm attack-surface-management
Language:Go 6249
osmedeus
j3ssie / osmedeus
A Workflow Engine for Offensive Security
attack-surface attack-surface-management bug-bounty bugbounty go golang hacking hacking-tool information-gathering osint penetration-testing pentest-tool pentesting reconnaissance scanning security security-tools
Language:Go 5945
ElectricEye
jonrau1 / ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
security-tools security-audit cloud-security security-monitoring aws-security security-hub cloud-compliance-reporting cloud-auditing security-engineering devsecops aws-audit aws-compliance compliance attack-surface-management aws gcp-security multicloud saas-security google-cloud-security asset-management
Language:Python 1021
PhonePe / mantis
Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.
application-security attack-surface-management bugbounty caasm hacktoberfest osint pentesting product-security recon security-tools
Language:Python 1007
censys / censys-python
An easy-to-use and lightweight API wrapper for Censys APIs.
api attack-surface-management censys hacktoberfest pypi python python3 search
Language:Python 446
0xbug / biu
网络资产攻击面梳理
security easm biu biu-asm attack-surface-management
417
g0ldencybersec / EasyEASM
Zero-dollar attack surface management tool
attack-surface-management recon blackhat defcon golang
Language:Go 302
someengineering / cloud-security-list
A list of cloud security tools and vendors.
attack-surface-management aws azure cnapp cspm dspm gcp security siem
179
e1abrador / sub.Monitor
Self-hosted passive subdomain continous monitoring tool.
attack-surface-management bug-bounty bugbounty bugbounty-tools bugbountytips infosec monitoring-tool python python3 red-team-tools security subdomain-enumeration subdomain-scanner
Language:Python 168
red-kite-solutions / stalker
Stalker, the Extensible Attack Surface Management tool.
attack-surface-management security-automation security-tools easm security bug-bounty xasm
Language:TypeScript 87
r57-labs / chaos
Origin IP scanning utility developed with ChatGPT
attack-surface-management bug-bounty bugbounty chatgpt information-gathering origin-ip penetration-testing pentest python python3 recon reconnaissance security enumeration scanner
Language:Python 68
aryanguenthner / 365
BlueTeam, RedTeam, Bug bounty, CTI, OSINT, Threat Hunting, Network and Web Recon, Discovery, Enumeration, Vulnerability Mapping, Exploitation, Reporting, Darkweb, Deepweb, Research
attack-surface-management pentesting-tools red-team blue-team reconnaissance cybersecurity penetration-testing
Language:Shell 53
owasp-amass / amass-docker-compose
OWASP Amass Docker Compose for setting up a full instance of the infrastructure
asm attack-surface attack-surface-management discovery docker-compose internet-security owasp recon scouting visibility
49
openeasm / ICP-API
ICP备案查询 API
attack-surface-management easm security security-tools
Language:Python 34
yoryio / ShodanFavicon
List of MurmurHash3 favicon hashes of widely used technologies by vendor to search with Shodan.
attack-surface-management murmurhash3 shodan
26
trickest / elasticsearch_index
Manage attack surface data on Elasticsearch
asm attack-surface-management threat-intelligence vulnerabilities web-server data elastic elasticsearch-client penetration-testing penetration-testing-tools pentesting pentesting-tools recon security-tools
Language:Python 23
LeakIX / LeakIXClient-Python
Python Client to LeakIX API
attack-surface-management bugbounty leakix redteam bounty hacktoberfest infosec osint python security vulnerability
Language:Python 20
ricardomaia / nuclei-template-generator-for-wordpress-plugins
Nuclei template generator for WordPress plugins
asset-inventory attack-surface-management nuclei-templates
Language:Dockerfile 20
owasp-amass / asset-db
Database interaction layer to store the Open Asset Model in a database management system
attack-surface attack-surface-management digital-footprint digital-footprint-analysis digital-footprint-data vulnerability-management
Language:Go 18
open-asm
oasm-platform / open-asm
🎯 Open-source platform for cybersecurity Attack Surface Management (ASM).
attack-surface-management cybersecurity easm oasm open-asm
Language:TypeScript 17
Open-ASPM-Project / core-software
Open Source ASPM Platform
application-security appsec aspm attack-surface-management cybersecurity information-security secret-scanning software-composition-analysis gitleaks nuclei trivy trufflehog
Language:TypeScript 9
ciso360ai / ciso360ai
CISO360.AI
attack attack-surface-management cybersecurity gamification identity offensive-security privacy risk risk-management vulnerability-assessment vulnerability-scanners compliance hibp nist nist-csf pentest
Language:Shell 8
0x4f53 / subs
Grab valid subdomains, resolve them, split them and more!
attack-surface-management cybersecurity cybersecurity-tool cybersecurity-tools golang infosec linux macos network-analysis pentesting recon reconnaissance subdomain-enumeration sudomains tools utilities osint subdomain-finder-in-go hacking hacking-tool
Language:Go 5
website
ciso360ai / website
CISO360.AI public website
cybersecurity gamification identity privacy risk-management vulnerability-assessment attack-surface-management offensive-security
Language:Astro 4
cyberxplore / assetx
AssetX helps streamline reconnaissance and vulnerability scanning workflows.
asm attack-surface-management recon reconnaissance security
Language:Go 4
heryxpc / byo-asm-recon
Workshop that shows how to build your own ASM recon on external and cloud assets. Presented at HackGDL 2024.
attack-surface-management
Language:Dockerfile 4
Ap6pack / asm-cheatsheet
A tactical, practical community reference for Attack Surface Management. This guide provides real-world advice, open-source tooling, and automation concepts for discovering, analyzing, and managing digital exposures.
attack-surface-management blue-team cheatsheet cybersecurity infosec penetration-testing pentesting reconnaissance red-team security-tools subdomain-enumeration vulnerability-assessment
Language:Python 3
owasp-amass / docs
Official Documentation for the OWASP Amass Project
attack-surface attack-surface-management digital-footprint digital-footprint-analysis digital-footprint-data infosec intelligence-gathering intelligence-graph-collection osint recon reconnaissance security vulnerabilities vulnerability-management
Language:HTML 3
0x4f53 / textsubs
A simple Golang library to extract subdomains from any piece of text.
attacksurface cybersecurity golang golang-library golang-package attack-surface-management infosec pentesting subdomain-enumeration subdomain-finder
Language:Go 2
runZeroInc / runzero-custom-integrations
Custom Integrations for the runZero Exposure Management Platform
attack-surface-management caasm exposure integrations runzero security starlark
Language:Starlark 2
johnnyxmas / ScanCannon-PS
A Powershell implementation of ScanCannon for external attack surface discovery, enumeration and reconnaissance for massive networks
asset-inventory asset-management attack-surface-management penetration-testing pentesting reconnaissance
Language:PowerShell 1
GDorkT
OESec / GDorkT
cybersecurity-education dork dorking attack-surface-management learn open-source ai artificial-intelligence proactive-security threat-management osint subdomain
Language:TypeScript 1
Scav-engeR / TARANTULA
Enterprise Attack Surface Management Platform
attack-surface-management automated-testing automation cli cybersecurity detection pentesting poc toolkit vuln vulnerability vulnerability-scanners webscanner
Language:Python 0
allsafeASM / webapp
Web Interface for AllSafeASM.
attack-surface-management scanner security
Language:HTML