passive

Tools

1. graphw00fpassive

   Fingerprints the GraphQL engine behind an endpoint.

   Open ↗
2. Nucleipassive

   Fast, high-value template scan for exposures, misconfigurations, takeovers and default logins.

   Open ↗
3. retire.jspassive

   Detects vulnerable JavaScript libraries in a target.

   Open ↗
4. sslscanpassive

   Audits TLS protocols, ciphers and certificates.

   Open ↗
5. testssl.shpassive

   Deep TLS configuration and vulnerability testing.

   Open ↗
6. theHarvesteropt-inpassive

   Passive OSINT gathering of emails, subdomains and hosts from keyless public sources.

   Open ↗
7. waymorepassive

   A reconnaissance tool that discovers archived URLs and content for a target domain by aggregating seven historical sources (Wayback Machine, Common Crawl, AlienVault OTX, URLScan, VirusTotal, GhostArchive, Intelligence X). It can also download the archived responses so they can be searched for additional links, developer comments, and hidden parameters, with filtering by status code, MIME type, keyword, and date range.

   Open ↗