Topic: security-tools
92 skills in this topic.
-
osint
Open-source intelligence gathering - company repository enumeration, secret scanning, git history analysis, employee footprint, and code exposure discovery.
transilienceai/communitytools 129
-
reconnaissance
Domain assessment and web application mapping - subdomain discovery, port scanning, endpoint enumeration, API discovery, and attack surface analysis.
transilienceai/communitytools 129
-
server-side
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
transilienceai/communitytools 129
-
source-code-scanning
Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies for CVEs".
transilienceai/communitytools 129
-
dns-intelligence
Extracts technology signals from DNS records (MX, TXT, NS, CNAME, SRV)
transilienceai/communitytools 129
-
subdomain-enumeration
Enumerates subdomains using CT logs, passive DNS, and search engine dorks
transilienceai/communitytools 129
-
json_report_generator
transilienceai/communitytools 129
-
http-fingerprinting
Analyzes HTTP responses for technology signatures in headers, cookies, and error pages
transilienceai/communitytools 129
-
domain-discovery
Discovers official company domain via web search, WHOIS, and common TLD patterns
transilienceai/communitytools 129
-
confidence_scorer
transilienceai/communitytools 129
-
api-portal-discovery
Discovers public API portals, developer docs, and OpenAPI/Swagger endpoints
transilienceai/communitytools 129
-
web-archive-analysis
Uses Wayback Machine to detect technology migrations over time
transilienceai/communitytools 129
-
signal_correlator
transilienceai/communitytools 129
-
job-posting-analysis
Extracts technology requirements from job postings and career pages
transilienceai/communitytools 129
-
html-content-analysis
Parses HTML for meta tags, generator comments, and script URL patterns
transilienceai/communitytools 129
-
ip-attribution
Maps IP addresses to cloud providers, ASNs, and organizations via WHOIS
transilienceai/communitytools 129
-
code-repository-intel
Scans GitHub/GitLab for public repos, dependencies, and CI configurations
transilienceai/communitytools 129
-
cdn-waf-fingerprinter
Identifies CDNs (Cloudflare, Akamai, Fastly) and WAFs
transilienceai/communitytools 129
-
techstack-identification
OSINT-based technology stack identification. Discovers company tech stacks using passive reconnaissance across 17 intelligence domains. Given a company name (and optional domain hint), infers frontend, backend, infrastructure, and security technologies using publicly available signals.
transilienceai/communitytools 129
-
tls-certificate-analysis
Analyzes TLS certificates for issuer, SAN, and JARM fingerprints
transilienceai/communitytools 129
-
javascript-dom-analysis
Detects frontend frameworks via global variables, DOM attributes, and bundle patterns
transilienceai/communitytools 129
-
devops-detector
Detects CI/CD tools, containerization, and orchestration from public signals
transilienceai/communitytools 129
-
backend-inferencer
Infers backend technologies including servers, languages, frameworks, databases, and CMS
transilienceai/communitytools 129
-
system
System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.
transilienceai/communitytools 129