-
A tool for subdomain enumeration and technology stack identification is a valuable asset for both security professionals and web developers. Such a tool typically performs the following functions:
…
-
Only 3 to 4 subdomains are found of websites like twitter, reddit, etc. what is the problem going on? It didn't use to be like this. What should I do?
-
Leveraging an API key for the PassiveTotal (passivetotal.org) service would be super neat for grabbing more subdomains and related domains.
-
**Note: I did a quick search to see if I could find a config file like the one I'm proposing, but I could only find [this](https://github.com/chromium/badssl.com/blob/master/domains/misc/badssl.com/da…
-
I couldnt figure this out, what is the default wordlist Amass uses when the -brute flag is passed (for enum module, subdomain enumeration) without a specified wordlist?
-
**Bug Description**
when assets are classified, the `ipv4` class takes precedence over the `domain` class. this causes many assets that are discovered by subdomain enumeration to have the `ipv4` clas…
-
### Nuclei version: 3.2.8
### Current Behavior:
Nuclei gets killed if you scan postgres ips on list longer than 50 in high severity
### Expected Behavior:
To not crash and finish scan
### Ste…
-
I'm thinking to integrate a Lua interpreter to do stuff like:
```lua
function find_open_ports(host)
legba("tcp.ports --tcp-ports 80-10000 --target " .. host .. "'")
end
function scan_web_…
-
Good morning, I would like to try to implement my tool.
It's called Lrod and is used to help bug hunters and pentesters during reconnaissance.
**Characteristics:**
☑ Enumeration of subdomains…
-
**Feature Request or Bug or Other**
Feature Request
**Describe the feature request or bug or other**
Would be keen to get something that works similar to `-iL` in which we could feed in a list o…