The recursive internet scanner for hackers. 🧡

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

An easy-to-use and lightweight API wrapper for Censys APIs.

Self-hosted passive subdomain continous monitoring tool.

Origin IP scanning utility developed with ChatGPT

ICP备案查询 API

Manage attack surface data on Elasticsearch

Python Client to LeakIX API

Network scanner that maps infrastructure into a Neo4j graph and executes natural-language security operations via AI agents.

A tactical, practical community reference for Attack Surface Management. This guide provides real-world advice, open-source tooling, and automation concepts for discovering, analyzing, and managing digital exposures.

Hybrid tool for passive reconnaissance and attack surface analysis in web applications. It combines advanced scraping, technology fingerprinting, security assessment, and reporting into a single CLI solution. Designed for ethical, educational, and auditing purposes. This software MUST NOT be used on third-party systems.

mapping the attack surface of a target url.

Lightweight attack-surface & exposure-mapping CLI (discovery, grading, cloud summary, HTML/JSON reports)

A Software Developer's Kit and Command Line Interpreter interface for Bitsight Security Ratings. This application is built to export data via the extensive BitSight API for writing it into Microsoft SQL Server (MSSQL) using a 1:1 physical table representation of BitSight endpoints.

Enterprise Attack Surface Management Platform

🛠️ Monitor files, tasks, and system requests effortlessly with MANTIS, your open-source tool for understanding application behavior.

A production-ready PentestOps and Attack Surface Management platform built to manage real-world security testing workflows, including engagements, asset discovery, findings tracking, remediation, and reporting.