Tools
clairvoyance
nikitastupin/clairvoyance
Clairvoyance is a command-line penetration testing tool that recovers a GraphQL API schema even when introspection is disabled, using wordlists and response inference, then exports it as JSON.
Topics
Related projects
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.
faraday6.8kFaraday is an open-source vulnerability management platform that aggregates and normalizes results from many scanners, adding multiuser collaboration, visualization, and reporting.
pacu5.4kAn open-source AWS exploitation framework for offensive security testing. Penetration testers use its pluggable modules to enumerate, escalate privileges, backdoor IAM users, and exfiltrate data from cloud environments.
cameradar5.3kCameradar is a penetration-testing tool for RTSP surveillance cameras. It discovers reachable camera hosts, fingerprints device models and uses dictionary attacks to uncover stream routes and credentials, shipping as a Docker image or Go binary.
knockpy4.2kA modular subdomain enumeration tool that combines passive reconnaissance sources with wordlist brute force, validating HTTP/TLS responses and producing reports.