(vuln scanner) Web Security Scanner

Passive Scan

• Find assets with shodan

• RapidDNS to get subdomains

• Certsh to enumerate subdomains

• DNS enumeration

• Waybackurls to fetch old links

Normal / Agressive Scan

• Domain http code

• Web port scanning

• Server information

• HTTP security header scanner

• CMS security identifier / misconfiguration scanner

• Technology scanner

• Programming Language check

• Path Traversal scan

• Nuclei vulnerability scanning

GitHub - gotr00t0day/Gsec: Web Security ScannerGitHub