Tool · passivepassive
graphw00f
Fingerprints the GraphQL engine behind an endpoint.
Use responsibly
Test only systems you own or are explicitly authorized to test. Unauthorized testing is illegal.
Tagspassive
More tools
- NucleipassiveFast, high-value template scan for exposures, misconfigurations, takeovers and default logins.
- retire.jspassiveDetects vulnerable JavaScript libraries in a target.
- sslscanpassiveAudits TLS protocols, ciphers and certificates.
- testssl.shpassiveDeep TLS configuration and vulnerability testing.
- theHarvesterpassivePassive OSINT gathering of emails, subdomains and hosts from keyless public sources.
- waymorepassiveA reconnaissance tool that discovers archived URLs and content for a target domain by aggregating seven historical sources (Wayback Machine, Common Crawl, AlienVault OTX, URLScan, VirusTotal, GhostArchive, Intelligence X). It can also download the archived responses so they can be searched for additional links, developer comments, and hidden parameters, with filtering by status code, MIME type, keyword, and date range.