8.3.1. 子域爆破 subDomainsBrute wydomain broDomain ESD aiodnsbrute OneForAll subfinder 8.3.2. 域名获取 the art of subdomain enumeration sslScrape 8.3.3. 弱密码爆破 hydra medusa htpwdScan patator 8.3.4. Git信息泄漏 GitHack By lijiejie GitHack By BugScan GitTools Zen dig github history gitrob Reconnaissance tool for GitHub organizations git secrets 8.3.5. Github监控 Github Monitor Github Dorks GSIL Hawkeye gshark GitGot gitGraber 8.3.6. 路径及文件扫描 weakfilescan DirBrute dirsearch bfac ds_store_exp 8.3.7. 指纹识别 Wappalyzer whatweb Wordpress Finger Print CMS指纹识别 8.3.8. Waf指纹 identywaf wafw00f WhatWaf 8.3.9. 端口扫描 nmap zmap masscan ShodanHat DNS dnsenum nslookup dig fierce SNMP snmpwalk 8.3.10. DNS数据查询 VirusTotal PassiveTotal DNSDB sitedossier 8.3.11. DNS关联 Cloudflare Enumeration Tool amass Certificate Search 8.3.12. 云服务 Find aws s3 buckets CloudScraper AWS Bucket Dump 8.3.13. 数据查询 Censys Shodan Zoomeye fofa scans Just Metadata publicwww - Find Web Pages via Snippet 8.3.14. Password Probable Wordlists Common User Passwords Profiler chrome password grabber 8.3.15. 字典 Blasting dictionary pydictor 8.3.16. 其他 datasploit watchdog archive HTTPLeaks htrace AWSBucketDump