Search Results for "attack surface management"

...It queries services such as certificate transparency logs, threat intelligence platforms, and passive DNS providers to build a comprehensive list of related assets. The tool is widely used in bug bounty programs and penetration testing to map an organization’s external attack surface. It supports optional filtering to return only subdomains, allowing users to focus on specific reconnaissance needs. assetfinder is lightweight and easy to use, typically requiring only a single command to produce results, making it ideal for quick enumeration tasks. Its modular design allows contributors to add new data sources, improving coverage over time.

Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Aquatone is designed to be as easy to use as possible and to integrate with your existing toolset with no or minimal glue. Aquatone is started by piping output of a command into the tool. It doesn't really care how the piped data looks as URLs, domains, and IP addresses will be extracted with regular expression pattern matching. ...