A collection of playbooks to help you automate your workflows.
Finds assets online by searching for subdomains, IP addresses, and more.
Scans a target domain for vulnerabilities and misconfigurations.
Checks the reputation of a target domain to identify potential security risks.
Performs OSINT to gather information for social engineering attacks.
Defines the scope of a penetration test by identifying target assets and attack vectors.
Analyzes session data to identify potential security risks and anomalies.
Diagnoses technical issues on a website to identify connectivity issues.
This playbook first identifies groups of pages on a domain that might have different tech stacks (pattern scout). For each identified group, it then determines which software is being used (webtech), and any known vulnerabilities in JavaScript libraries on the page (jsvulns). Finally, it searches for known vulnerabilities in the software identified during the search (vulnsearch).
This playbook studits the subdomains of a provided domain. It determine all of the subdomains and then for each finds the supported HTTP methods, web technology stack and DNS records.