easm

The recursive internet scanner for hackers. 🧡

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

一个基于网络空间搜索引擎的攻击面管理平台，可定时进行资产信息爬取，及时发现新增资产，本项目聚合了 Fofa、Hunter、Quake、Zoomeye 和 Threatbook 的数据源，并对获取到的数据进行去重与清洗

网络资产攻击面梳理

Это вам не балалайка, получается

Open-source Attack Surface Management. Discover assets. Identify exposure. Own your security data.

Marshal-EASM 攻击面管理系统-社区版

Red Kite, the Extensible Attack Surface Management tool.

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management.

ICP备案查询 API

External attack surface monitoring & vulnerability automation

Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.

(Continuously) scans your internet facing infrastructure to discover exposed ports and services, helping you identify changes and reduce your external attack surface.

Tool for automated scanning of the common vulnerabilities of company subdomains

Open-source, self-hosted external attack-surface management (EASM). Continuous discovery + 28 detection modules, the exact request behind every finding, and a visual Playground. Detection only.

mønømi: passive domain recon with AI-written analysis, by 0x41

🕵️ Purely passive OSINT/EASM/CTEM platform — 15+ data sources, zero-touch asset discovery, risk detection

Ardra is an all-in-one External Attack Surface Management (EASM) tool that helps identify and assess security risks by automating subdomain discovery, vulnerability scanning, DNS analysis, and app security testing.

Self-hosted, always-on external attack-surface monitoring. Finds dangling DNS, subdomain takeovers, expiring certificates and exposed services across Cloudflare, AWS and Kubernetes. Alerts via Alertmanager.