Application security-To understand attack surface area
These tools will help you the attack surface area before testing
| Sr No | Name | Description | Link |
|---|---|---|---|
| 1 | crt.sh | crt.sh is a web-based service that allows users to search and analyze SSL/TLS certificates published in Certificate Transparency (CT) logs. | Visit Link |
| 2 | urlscan io | URLScan.io is a web-based URL analysis and threat intelligence platform that safely scans and analyzes websites. | Visit Link |
| 3 | wappalyzer.com | Wappalyzer helps sales and GTM teams build technographic prospect lists, enrich CRM records, and monitor competitor installs with data from millions of websites this helps in understanding attack surface area | Visit Link |
| 4 | Wayback Machine | The Wayback Machine is an initiative of the Internet Archive, a 501(c)(3) non-profit, building a digital library of Internet sites | Visit Link |
| 5 | Shodan | A search engine for internet-connected devices, allowing users to discover servers, IoT devices, and open ports across the web. | Visit Link |
| 6 | VirusTotal | A free service that analyzes suspicious files and URLs to detect malware and automatically shares them with the security community. | Visit Link |
| 7 | Have I Been Pwned | A popular data breach aggregation service that allows users to check if their personal data has been compromised in data leaks. | Visit Link |
| 8 | Censys | Censys helps organizations, individuals, and researchers find and monitor every server on the Internet to reduce exposure and improve security. | Visit Link |
| 9 | DNSTwister | A domain name permutation engine and rogue domain monitoring tool that helps identify potential phishing and typosquatting threats | Visit Link |
| 10 | DNSDumpster | A free passive DNS research tool used to discover subdomains, host records, and generate visual infrastructure maps instantly. | Visit Link |
| 11 | Pulsedive | A community threat intelligence platform that compiles open-source feeds, enriches indicators of compromise, and assigns real-time risk scores. | Visit Link |
| 12 | Web Check | An open-source, entirely free website intelligence analyzer providing comprehensive infrastructure data, SSL details, and security headers from one clean interface. | Visit Link |
| 13 | CyberChef | A completely free, web-based "cyber swiss army knife" used to encode, decode, decrypt, parse, and analyze complex data structures. | Visit Link |