Summary

Gobuster：URI/DNS/WEB爆破
dirsearch：目录扫描/爆破
dirmap：目录扫描/爆破

jwt_tool：JSON Web Token Toolkit https://github.com/ticarpi/jwt_tool
ffuf：高速web fuzz工具 https://github.com/ffuf/ffuf
Arjun：HTTP参数扫描器 https://github.com/s0md3v/Arjun
URLFinder：JS与URL快速提取检测 https://github.com/pingc0y/URLFinder
ksubdomain：子域名爆破 https://github.com/knownsec/ksubdomain
c-jwt-cracker：JSON Web Token Cracker

Gobuster

DownloadLink

  • Usage

Dirsearch

  • Usage

dirmap

  • Install
1
git clone https://github.com/H4ckForJob/dirmap.git && cd dirmap && python3 -m pip install -r requirement.txt
  • Usage
1
python3 dirmap.py -i https://target.com -lcf
  • Commit
    The tool can use but the author haven’t update for a long time.
    And seems the tool is useless.