Offensive Security
Authorized Web Content Exposure
Run a bounded discovery pass against an authorized URL - reachability, stack/CMS/WAF fingerprinting, directory discovery, web shell exposure, and Git/secrets exposure.
Runs 7 tools in one pass against one URL - HTTP reachability, technology/CMS/WAF fingerprinting, bounded directory discovery, a web shell exposure check, and a Git/secrets exposure scan (now available following this batch's re-investigation of git-exposure-scanner, see that service's own header comment). Every step runs unconditionally, matching this app's other web-exposure workflows - the reference's own reachability gate is not replicated here.
Tool chain
- HTTP Status Checker
- Tech Stack Analyzer
- CMS Detector
- WAF Detector
- Directory Bruteforcer
- Web Shell Finder
- Git & Secrets Exposure Scanner