OpenDoor

stanislav-web OpenDoor is an open-source CLI-based web reconnaissance and directory discovery platform written in Python. It is designed for authorized security testing by penetration testers, security researchers, bug bounty hunters, and DevSecOps engineers. Core capabilities include: - Directory and recursive directory discovery using wordlist-based enumeration - Subdomain enumeration - Technology fingerprinting for CMS platforms, frameworks, runtime stacks, ecommerce platforms, infrastructure providers, and HSTS posture - Passive WAF detection with a safe-mode scanning profile to reduce blocked responses - Controlled header and path bypass probing for HTTP 401 and 403 responses - Smart auto-calibration for soft-404, wildcard, catch-all, semantic response-diff, and DNS wildcard scenarios - Response filtering by status code, size, text, regex, and body length - Response sniffers for detecting directory listings, empty responses, known file exposures, shadow-copy probes, exposed secrets, debug stack traces, and open redirect vulnerabilities - Passive privacy-risk checks including HSTS, ETag/cache, and supercookie surface detection - Multi-threading support for faster scans - Multiple input modes: single target, target file, stdin, IPv4 CIDR, and IPv4 range - Custom wordlists, prefixes, shuffling, extension filters, and remote wordlist support - Custom request headers, cookie forwarding, and raw HTTP request templates - Resumable scan sessions with checkpoint autosave - Differential report comparison between previous and current JSON or SQLite reports - Report output in terminal, text, JSON, CSV, HTML, SARIF, and SQLite formats - Proxy, OpenVPN, and WireGuard transport profiles with sequential per-target transport rotation - CI/CD integration via fail-on result bucket rules - Configuration wizard for repeatable scan profiles OpenDoor runs on Linux, macOS, and Windows and supports Python 3.12 and above. It is available via PyPI, Homebrew, Docker, AUR, and BlackArch.