(vuln scanner) Web Security Scanner

Passive Scan

  • Find assets with shodan

  • RapidDNS to get subdomains

  • Certsh to enumerate subdomains

  • DNS enumeration

  • Waybackurls to fetch old links

Normal / Agressive Scan

  • Domain http code

  • Web port scanning

  • Server information

  • HTTP security header scanner

  • CMS security identifier / misconfiguration scanner

  • Technology scanner

  • Programming Language check

  • Path Traversal scan

  • Nuclei vulnerability scanning

Last updated