Generic, site-agnostic XHR/API discovery scanner built on Playwright — active exploration with an optional AI-agent-driven adaptive mode.
Point an app at two logged-in users and it finds the broken access control (IDOR). Deterministic browser perception + cross-identity authz testing for AI agents — drives your real Chrome over MCP or runs headless. Open-core, local, no account.
web reconnaissance crawler - maps attack surfaces, fingerprints technologies, and catalogs every form, endpoint, and parameter on a target domain
A GitHub Actions workflow for automated Attack Surface Mapping and Reconnaissance. Finds subdomains using Subfinder and scans ports using Nmap.
Security reconnaissance preset for DeepSeek Harness with evidence backed reporting.
ThreatLens - Threat Intelligence & Attack Surface Mapping Platform
ReconWeave is an elite, zero-dependency Attack Surface Mapper and Intelligent Web Crawler designed for penetration testers, bug bounty hunters, and security researchers. Built entirely on Python's standard library, it provides deep inspection of web applications, automatic secret detection, and seamless proxy chaining.
To associate your repository with the attack-surface-mapping topic, visit your repo's landing page and select "manage topics."