HawkScan is one tool security for identification and collection information on a website.
This script uses " WafW00f to detect the WAF as a first step, the " Sublist3r” to scan subdomains and " waybacktool”To check the waybackmachine.
Specifications
- Remove URLs and locate files
- He checks them information of the header
- Checks DNS information
- Exports files
- Keep a trace of the scan
- Check @mail on the site and see if it has been leaked
- CMS detection
- Subdomain control
- Backup system
- WAF detection
- Automatic program update
- Automatic or manual scan output (scan.txt)
- Scan with authentication cookie
- HTML reference
- Waybackmachine control
- Checks if the DataBase firebase exists and is accessible
- Search S3 on the source code page
- Waf bypass check if detected
Installation
git clone https://github.com/c0dejump/HawkScan.git cd HawkScan pip3 install -r requirements.txt
Application snapshots and use
You will find information about using the program here.
