Monsoon is a fast and flexible HTTP enumerator that can be used for a wide variety of actions ranging from content discovery to credential bruteforcing. It allows you to execute a large number of HTTP requests, filter the responses and display them in real-time. You can use it to send HTTP GET requests for each entry in a file, ignoring all responses with a status code of 404. It is a single statically linked binary, so you can simply download a pre-built binary for your operating system from the releases page. Alternatively, you can build it from source by cloning the repository and running the command `go build`. It can be used on other operating systems such as Windows by setting the `GOOS` environment variable.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Comprehensive guide for Iptables configuration and firewall rules.
An automated DDoS vulnerability testing platform that continuously evaluates DDoS protection systems without causing operational downtime.
A wrapper around jNetPcap for packet capturing with Clojure, available for Linux and Windows.
Suricata offers real-time intrusion detection, intrusion prevention, and network monitoring.
A Burp Suite extension that formats GraphQL requests for easier reading
FingerprintX is a standalone utility for service discovery on open ports.
A printer honeypot PoC that simulates a printer on a network to detect and analyze potential attackers.
Network Dump data Displayer and Editor framework for tcpdump trace files manipulation.
A honeypot that logs NTP packets into a Redis database to detect DDoS attempts.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.