{"repo":"gotr00t0day/Gsec","free":true,"listed":false,"github":"https://github.com/gotr00t0day/Gsec","clone":"git clone https://github.com/gotr00t0day/Gsec.git","description":"Web Security Scanner","language":"Python","stars":386,"topics":["bugbounty","cybersecurity","pentesting","security","security-tools","vulnerability-scanners","web","nuclei","hacking","reconnaissance"],"license":null,"category":"security-tools","readme_excerpt":"Web Security Scanner & Exploitation. Based on custom vulnerability scanners & Nuclei Features • Keys • Install • Usage • KeyWords • Join Discord Features Passive Scan - Find assets with shodan - RapidDNS to get subdomains - Certsh to enumerate subdomains - DNS enumeration - Waybackurls to fetch old links - Find domains belonging to your target Normal / Agressive Scan - Domain http code - Web port scanning - Server information - HTTP security header scanner - CMS security identifier / misconfiguration scanner - Technology scanner - Programming Language check - Path Traversal scan - Web Crawler - OS detection - Nuclei vulnerability scanning - SSRF, XSS, Host header injection and Cors Misconfiguration Scanners - Session Management Security Analysis (fixation, hijacking, timeout, concurrent sessions) - SSL/TLS Security Analysis (certificate validation, protocol support, cipher suites) - API Security Testing Suite (BOLA/IDOR, authentication bypass, verb tampering, mass assignment, GraphQL security, rate limiting) - Cloud Misconfiguration Scanner (AWS S3, Azure Storage, GCP buckets, exposed files, Docker/Kubernetes, metadata endpoints) - HTTP Request Smuggling Detection (CL.TE, TE.CL, TE.TE, desync attacks, response queue poisoning) - GraphQL Security Testing (introspection, depth DoS, batch queries, authorization bypass, injection attacks) 🏆 Feature Comparison Gsec vs Popular Security Scanners: Feature Nikto OWASP ZAP Burp Free Burp Pro Gsec v3.8 --------- :-----: :------","default_branch":null,"files":null,"tree":[],"storefront":"/r/gotr00t0day","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/gotr00t0day/Gsec/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}