Offensive Security

External Asset Footprint

Chain WHOIS, DNS, subdomain discovery, reverse IP, geolocation, HTTP, SSL, tech stack, WAF, and security header checks against one domain.

external-asset-footprint10 stepsreconfootprintchain

Runs 10 recon tools in one pass to build a public asset footprint for an authorized domain - WHOIS, DNS, subdomains, reverse IP, IP geolocation, HTTP status, SSL, technology stack, WAF, and security headers.

Tool chain

  1. WHOIS Lookupwhois-lookup
  2. DNS Lookupdns-lookup
  3. Subdomain Findersubdomain-finder
  4. Reverse IP Lookupreverse-ip
  5. IP Geolocationip-geolocation
  6. HTTP Status Checkerhttp-status
  7. SSL Checkerssl-checker
  8. Tech Stack Analyzertech-stack-analyzer
  9. WAF Detectorwaf-detector
  10. Security Headers Checkersecurity-headers