9.3. 信息收集

9.3.1. Whois

• who.is

• 万网WHOIS

• 腾讯云WHOIS

• 站长之家WHOIS

9.3.2. 网站备案

• 天眼查

• ICP备案查询

• 爱站备案查询

9.3.3. CDN查询

• 多地Ping

• CDN服务商查询

9.3.4. 子域爆破

• subDomainsBrute

• wydomain

• broDomain

• ESD

• aiodnsbrute

• OneForAll

• subfinder

9.3.5. 域名获取

• the art of subdomain enumeration

• sslScrape

• aquatone A Tool for Domain Flyovers

• teemo A Domain Name & Email Address Collection Tool

• DNS DB 历史记录

9.3.6. 弱密码爆破

• hydra

• medusa is a high-speed network authentication cracking tool

• Ncrack

• htpwdScan

• patator

9.3.7. Git信息泄漏

• GitHack By lijiejie

• GitHack By BugScan

• GitTools

• Zen

• dig github history

• gitrob Reconnaissance tool for GitHub organizations

• git secrets

• shhgit Find GitHub secrets in real time

• GitHound GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. A batch-catching, pattern-matching, patch-attacking secret snatcher

• x patrol Github leaked patrol

• GitDorker scrape secrets from GitHub through usage of a large repository of dorks

9.3.8. Github监控

• Github Monitor Github Sensitive Information Leakage Monitor

• Github Dorks

• GSIL

• Hawkeye

• gshark

• GitGot

• gitGraber

9.3.9. 路径及文件扫描

• weakfilescan

• DirBrute

• dirsearch

• bfac

• ds_store_exp

9.3.10. 路径爬虫

• crawlergo A powerful dynamic crawler for web vulnerability scanners

9.3.11. 指纹识别

• Wappalyzer

• whatweb

• Wordpress Finger Print

• CMS指纹识别

• JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way

• TideFinger

9.3.12. Waf指纹

• identywaf

• wafw00f

• WhatWaf

9.3.13. 端口扫描

• nmap

• zmap

• masscan

• ShodanHat

• RustScan The Modern Port Scanner

• DNS dnsenum nslookup dig fierce

• SNMP snmpwalk

9.3.14. DNS数据查询

• VirusTotal

• PassiveTotal

• DNSDB

• sitedossier

9.3.15. DNS关联

• Cloudflare Enumeration Tool

• amass

• Certificate Search

9.3.16. 云服务

• Find aws s3 buckets

• CloudScraper

• AWS Bucket Dump

9.3.17. 数据查询

• Censys

• Shodan

• Zoomeye

• fofa

• scans

• Just Metadata

• publicwww - Find Web Pages via Snippet

9.3.18. Password

• Probable Wordlists Wordlists sorted by probability originally created for password generation and testing

• Common User Passwords Profiler

• chrome password grabber

9.3.19. CI信息泄露

• secretz minimizing the large attack surface of Travis CI

9.3.20. 个人数据画像

• GHunt Investigate Google Accounts with emails

9.3.21. 邮箱收集

• EmailHarvester

9.3.22. 其他

• datasploit

• watchdog

• archive

• HTTPLeaks

• htrace