Top 11 attack-surface Open-Source Projects

nuclei

17 17,293 9.8 Go

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Project mention: The 36 tools that SaaS can use to keep their product and data safe from criminal hackers (manual research) | /r/SaaS | 2023-05-22

Nuclei

Sn1per

5 7,528 6.1 Shell

Attack Surface Management Platform
InfluxDB

www.influxdata.com featured

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
bbot

5 3,733 9.8 Python

A recursive internet scanner for hackers.

Project mention: [GitHub Action]: Wrappers for sqlmap, bbot and nikto | /r/cybersecurity | 2023-05-29

Its not that much of a tool than wrappers of few awesome tools that most of you probably know and use today - sqlmap, bbot and nikto.

AttackSurfaceAnalyzer

18 2,660 0.0 C#

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
uncover

3 2,240 7.5 Go

Quickly discover exposed hosts on the internet using multiple search engines.

Project mention: Uncover: Quickly find exposed hosts using multiple search engines | news.ycombinator.com | 2023-12-30

AttackSurfaceMapper

3 1,271 2.5 Python

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
OTE

4 463 7.0 C

OSINT Template Engine (by 3nock)

Project mention: Introducing OSINT Template Engine: An open source OSINT Tool. | /r/websecurityresearch | 2023-07-12

SaaSHub

www.saashub.com featured

SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
awesome-attack-surface-monitoring

3 293 0.0

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.
webstor

5 150 2.8 Python

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.
OrgASM

2 26 7.1 Python

A tool for Oragnized ASM (Attack Surface Mapper). Subdomains enumeration, IPs scans, Vulnerability assesment...

Project mention: New Attack Surface Discovery tool : OrgASM | /r/cybersecurity | 2023-05-31

Exodus-ReverseIpLookup

1 12 0.0 Go

Reverse ip lookup tool written with go . Bing , Spyse , HackerTarget , ViewDns

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

attack-surface related posts

Uncover: Quickly find exposed hosts using multiple search engines

1 project | news.ycombinator.com | 30 Dec 2023
New Attack Surface Discovery tool : OrgASM

1 project | /r/cybersecurity | 31 May 2023
[GitHub Action]: Wrappers for sqlmap, bbot and nikto

3 projects | /r/cybersecurity | 29 May 2023
[GitHub Action][Release]: Add DAST and OSINT to your security pipelines

3 projects | /r/devops | 29 May 2023
Alternative to Datawalk or Analyst's Notebook?

1 project | /r/selfhosted | 19 May 2023
New 3rd Party Software Audit

1 project | /r/cybersecurity | 1 Apr 2023
Surface management tools

2 projects | /r/blueteamsec | 21 Feb 2023
A note from our sponsor - InfluxDB
www.influxdata.com | 5 May 2024

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

What are some of the best open-source attack-surface projects? This list will help you:

	Project	Stars
1	nuclei	17,293
2	Sn1per	7,528
3	bbot	3,733
4	AttackSurfaceAnalyzer	2,660
5	uncover	2,240
6	AttackSurfaceMapper	1,271
7	OTE	463
8	awesome-attack-surface-monitoring	293
9	webstor	150
10	OrgASM	26
11	Exodus-ReverseIpLookup	12