Lohitaksh Nandan
Lohitaksh Nandan

@NandanLohitaksh

5 Tweets 12 reads Aug 18, 2022
Recon Tools for Web Application Pentesting... :)
Credits ~ Khalid Maina
A Thread ๐Ÿงต โ†“
#cybersecurity #infosec #pentesting #bugbounty
Proxy
- burpsuite
- zap proxy
Subdomain
- subfinder
- assetfinder
- amass
- sublist3r
- dig
- chaos (chaos.projectdiscovery.io)
Webspidering
- gospider
- gau
- linkfinder
- waybackurls
- hakrawler
- paramspider
Directory/fuzzing
- ffuf
- wfuzz
- gobuster
- dirbuster
Fingerprinting
- wappalyzer
- builtwith
- netcraft
- whatweb
- wafw0f
Vulnerability
- nuclei
- wpscan
- nikto
Email
- mxtoolbox
- emkei
- anonymailer
- thunderbird
Exploit
- searchsploit
- exploitdb
Sensitive data
- trufflehog
- gitsecrets
Api
- postman
- graphqlmap
Payloads/wordlists
- swisskeyrepo
- seclists
Ports
- nmap
- masscan
- zmap
- smap
- hackertarget
Ssl
- sslscan
- sslhopper
Search Engines
- shodan
- censys
- zoomeye
- google
Misc
- httpx
- metasploit
- dnsdumpster
- httprobe
- recon-ng
- securitytrails
Retweet to let others know... :)
Thanks!

Loading suggestions...