Spring Actuator端点的BurpSuite被动扫描插件。

HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8.

基于burpsuite headless 的代理式被动扫描系统

Hamster是基于mitmproxy开发的异步被动扫描框架，基于http代理进行被动扫描，主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能（开发中）。

A branch of the original PhoneInfoga to keep using python

Passive Network Mapper - like nmap, but passive

Scan a list of IP addresses for honeypots using the Shodan CLI

Passive Reconnaissance using Multicast Protocols

🥷 Subduer is a subdomain passive reconnaissance tool utilising Playwright and several online providers that gathers subdomains and generates wordlists and reports in multiple formats.

🔥A burp plugin for text4shell passive scan

The Passive Company Scanner is a passive vulnerability scanning tool. By entering a company's name, it identifies associated IP addresses and gathers information on open ports, vulnerabilities, and more. It uses non-invasive techniques to map the attack surface without directly interacting with the targets.

Web Vulnerability Scanner

Lightweight RBI(Remote Browser Isolation)

GhostPeek is a stealthy domain reconnaissance tool that silently collects intelligence on web domains. It discovers subdomains, uncovers WHOIS information, maps DNS records, identifies technologies, and captures screenshots—all while generating comprehensive reports Like a ghost, it reveals hidden digital footprints without drawing attention.

The scope of this security assessment focuses on the following components and features 1. information gathering 2. enumeration 3. reconnaissance The assessment covered both the web application's frontend and backend components, including server-side code, client-side code, and any third-party libraries or frameworks in use.