Tool · passivepassive
Nuclei
Fast, high-value template scan for exposures, misconfigurations, takeovers and default logins.
Use responsibly
Test only systems you own or are explicitly authorized to test. Unauthorized testing is illegal.
Tagspassive
More tools
- graphw00fpassiveFingerprints the GraphQL engine behind an endpoint.
- retire.jspassiveDetects vulnerable JavaScript libraries in a target.
- sslscanpassiveAudits TLS protocols, ciphers and certificates.
- testssl.shpassiveDeep TLS configuration and vulnerability testing.
- theHarvesterpassivePassive OSINT gathering of emails, subdomains and hosts from keyless public sources.
- waymorepassiveA reconnaissance tool that discovers archived URLs and content for a target domain by aggregating seven historical sources (Wayback Machine, Common Crawl, AlienVault OTX, URLScan, VirusTotal, GhostArchive, Intelligence X). It can also download the archived responses so they can be searched for additional links, developer comments, and hidden parameters, with filtering by status code, MIME type, keyword, and date range.