{"repo":"cybersecify/OpenEASD","free":true,"listed":false,"github":"https://github.com/cybersecify/OpenEASD","clone":"git clone https://github.com/cybersecify/OpenEASD.git","description":"Self-hosted external attack surface scanner. Subdomain enumeration + takeover detection, ports, CVEs, TLS, SSH, web vulns, EPSS/KEV prioritisation. 19 tools across 6 phases, one `docker run`. MIT-licensed.","language":"Python","stars":21,"topics":["attack-surface","osint","recon","security","self-hosted","vulnerability-scanner","docker","infosec","nuclei","pentest-tool"],"license":"MIT","category":"security-tools","readme_excerpt":"OpenEASD See what attackers see. Use it before they do. Use it as a red teamer to map external surface fast on targets you're authorised to test. Use it as a defender to see what's leaking out of your own infrastructure: subdomains, exposed ports, dangling CNAMEs, missing TLS, known CVEs, without paying $500-5000/mo for a commercial EASM platform. OpenEASD wraps the open-source recon tools security teams already use: subfinder , amass , alterx , dnsx , subzy , cloud enum , naabu , nmap , httpx , gau , waybackurls , katana , nuclei , behind a single web UI with scheduling, alerts, and findings tracking. Nineteen tools across DNS, email, TLS, SSH, ports, CVEs, subdomain takeover, historical URLs, cloud assets, web hygiene, and CVE prioritisation (EPSS + CISA KEV). Self-hosted, MIT-licensed, one docker run . Results stay on your machine. Built by Rathnakara G N and Ashok S Kamat of Cybersecify, the same tool we run in engagements and on our own infrastructure. Who this is for - In-house security engineers and IT-doing-security teams at small-to-mid orgs scanning their own external surface - Small security consultancies monitoring a handful of clients - Bug bounty hunters who want a unified view of recon output across programs they're authorised to test - Solo self-hosters and security learners auditing their own infra Who this isn't for - Enterprise SOCs : no RBAC, SAML, multi-tenant, or Postgres (yet) - Anyone needing to scan domains they don't own or aren't authorised to test ","default_branch":null,"files":null,"tree":[],"storefront":"/r/cybersecify","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/cybersecify/OpenEASD/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}