A bash script that automates the scanning of a target network for HTTP resources through XXE. This script is designed to be used in a penetration testing or vulnerability assessment scenario. It uses the `curl` command to send HTTP requests to a target network and extracts information about the resources found. The script also includes some basic filtering and sorting options to make it easier to analyze the results. This script is intended for use by experienced penetration testers and vulnerability assessors. Please note that this script is for educational purposes only and should not be used to scan networks without permission.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A free DNS recursive service that blocks malicious host names and protects user privacy.
A Bluetooth 5 and 4.x sniffer using TI CC1352/CC26x2 hardware with advanced features and Python-based host-side software.
A blog sharing packet capture files and malware samples for training and analysis, with archived posts and traffic analysis exercises.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
A suite for man in the middle attacks, featuring sniffing of live connections, content filtering, and protocol dissection.
pfSense is a leading open source firewall and network security solution, providing advanced protection and connectivity options.
A free, open-source network protocol analyzer for capturing and displaying packet-level data.
Tor Browser is a free and open-source software that allows users to browse the internet anonymously and privately.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.