The recursive internet scanner for hackers. 🧡

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

一个基于网络空间搜索引擎的攻击面管理平台，可定时进行资产信息爬取，及时发现新增资产，本项目聚合了 Fofa、Hunter、Quake、Zoomeye 和 Threatbook 的数据源，并对获取到的数据进行去重与清洗

网络资产攻击面梳理

Это вам не балалайка, получается

AI-powered open-source platform for Attack Surface Management (OASM)

Marshal-EASM 攻击面管理系统-社区版

Red Kite, the Extensible Attack Surface Management tool.

ICP备案查询 API

External attack surface monitoring & vulnerability automation

Tool for automated scanning of the common vulnerabilities of company subdomains

🕵️ Purely passive OSINT/EASM/CTEM platform — 15+ data sources, zero-touch asset discovery, risk detection

Open-source, self-hosted external attack-surface management (EASM). Continuous discovery + 28 detection modules, the exact request behind every finding, and a visual Playground. Detection only.

Ardra is an all-in-one External Attack Surface Management (EASM) tool that helps identify and assess security risks by automating subdomain discovery, vulnerability scanning, DNS analysis, and app security testing.

Cross-platform domain reconnaissance wrapper: one command runs DNS, HTTP, WAF/CDN, TLS, port and nuclei scans, with a graceful fallback for every stage

secrets.wtf: defensive AI infrastructure exposure index for Ollama and LM Studio hosts, local LLM APIs, model observations, remediation, and takedown requests.

Mcp services by marshal

The repository contains detailed explanation and working flow of an lightweight EASM tool which integrates the attack surface information into the splunk

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.