Information Gathering Tools
Before attacking a target, adversaries gather intelligence. These information-gathering tools reveal what technology stack you are running, what subdomains exist, and what metadata your servers leak, so you can reduce your exposure first.
Important Information Scans Scanners
Free URL Fuzzer Online
Scan your web app for sensitive URLs (files or directories) regularly and make sure there are no publicly accessible URLs that you don’t want.
FingerprintHub Technology Fingerprint Tests Scanner
Online FingerprintHub Technology Fingerprint Tests Scanner
RDAP WHOIS Detection Scanner
This scanner detects the use of RDAP WHOIS in digital assets. It provides information on Internet resource records such as domain names, IP addresses, and ASNs.
Strapi CMS Detection Scanner
You can detect Strapi CMS applications using this tool.
Shopware CMS Detection Scanner
You can find Shopware CMS applications using this tool.
Craft CMS Detection Scanner
You can find Craft CMS using this tool.
October CMS Detection Scanner
You can find October CMS applications using this tool.
Grav CMS Detection Scanner
Online Grav CMS Detection Scanner
Burp Suite Rest API Server Detection Scanner
You can find Burp Suite Rest API Server using this tool.
WP Sitemap Page Technology Detection Scanner
This scanner detects the use of WP Sitemap Page in digital assets. It helps identify the presence of this WordPress plugin to assist in maintaining up-to-date and secure environments. Ensuring plugins are detected can prevent future vulnerabilities.
Allowed HTTP Methods
You can learn which HTTP methods are used for supporting your website with this tool.
Dahan JCMS Detection Scanner
This scanner detects the use of Dahan JCMS in digital assets.
Goldlib Wechat Detection Scanner
This scanner detects the use of Goldlib Wechat in digital assets.
Aftership Takeover Detection Scanner
Aftership Takeover Detection Scanner
Postgresql Version Enumeration Scanner
This scanner detects the use of Postgresql Version in digital assets. It identifies the PostgreSQL version in use, which is valuable for assessing possible security exposures related to outdated software.
MySQL Show Variables Enumeration Scanner
This scanner probes the MySQL server for the ability to execute the SHOW VARIABLES command, which can leak sensitive configuration details like paths and version info to an attacker.
GeoVision GV-SNVR0811 Detection Scanner
This scanner detects the use of GeoVision GV-SNVR0811 in digital assets.
Twitter API Secret Token Detection Scanner
This scanner checks for hardcoded Twitter API Secret Tokens in source code and configuration files, enabling attackers to impersonate accounts and access private data.
Twitch API Secret Token Detection Scanner
This scanner detects the use of Twitch API Secret Token Exposure in digital assets.
Sidekiq Secret Token Detection Scanner
This scanner checks for exposed Sidekiq secret tokens in HTTP responses or logs, enabling attackers to hijack background job processing.
PostgreSQL List Database Enumeration Scanner
This scanner detects the use of PostgreSQL List Database in digital assets. It identifies databases managed by a single Postgres server process. This detection is valuable for ensuring proper security measures are applied in multi-database environments.
Slack Legacy Token Detection Scanner
This scanner detects the use of Slack Legacy Token Exposure in digital assets.
Source Port Manipulation Scanner
This scanner detects open ports that may respond differently when probed using manipulated source ports. It helps identify network services that trust or allow access based on source port heuristics.
WAGO Web-Based Management Default Login Scanner
This scanner probes WAGO Web-Based Management login endpoints for default username/password combinations, enabling attackers to gain full administrative control over PLCs and automation systems.
Top 10 TCP Ports Scanner
Online Top 10 TCP Ports Scanner
MySQL User Enumeration Scanner
This scanner detects the use of MySQL in digital assets. It helps identify configurable user accounts on MySQL servers that may be vulnerable to exposure. This information is essential for maintaining database security and preventing unauthorized data access.
MySQL Enumeration Scanner
This scanner detects the use of MySQL in digital assets. It scans to identify database enumeration vulnerabilities on exposed MySQL servers, aiding in the prevention of unauthorized access. Ensures the full, descriptive name of the product is correctly used with the vulnerability type.
PostgreSQL Enumeration Scanner
This scanner detects the PostgreSQL List Users in digital assets. It checks for user enumeration vulnerabilities within PostgreSQL databases, offering a reliable assessment of potential security risks tied to exposed user listings.
Leaked Credentials Checker
We are using our e-mails in social-media, forum sites, applications and many other area. Sometimes one of the website or application leaks information about users which includes your e-mail and password. Even if your passwords are stored using hashing algorithms, atteckers can crack the hash and obtain your raw password.
Shopify Private App Access Token Detection Scanner
This scanner detects the use of Shopify Private App Access Token Exposure in digital assets.
Sendinblue API Token Detection Scanner
This scanner detects the use of Sendinblue API Token Exposure in digital assets. It is designed to identify tokens that may be exposed in application configurations or other contexts. This helps in mitigating unauthorized access and maintaining the security of API integrations.
Yandex Access Token Detection Scanner
This scanner detects the use of Yandex Access Token Exposure in digital assets. It identifies potential security risks associated with exposed Yandex tokens, enabling proactive measures. By scanning for Yandex token exposure, organizations can safeguard their assets from unauthorized access.
Yandex API Key Token Detection Scanner
This scanner detects the use of Yandex API Key vulnerability in digital assets.
Typeform API Token Detection Scanner
This scanner detects the use of Typeform API Token Exposure in digital assets.
Squarespace Access Token Detection Scanner
This scanner detects the use of Squarespace Token Exposure in digital assets.
TravisCI Access Token Detection Scanner
This scanner detects the use of TravisCI Token Exposure in digital assets. It helps in identifying exposed tokens in the web content, ensuring better security management.
Sentry Access Token Detection Scanner
This scanner detects the use of Sentry Access Token Exposure in digital assets. It provides critical insights into securing access by revealing token leaks that may compromise data integrity. Identifying exposed tokens helps in preemptive remediation measures.
Scalingo API Token Detection Scanner
This scanner detects the use of Scalingo API Token Exposure in digital assets.
SendBird Access Token Detection Scanner
This scanner detects the use of SendBird Access Token Exposure in digital assets.
Slack App Token Detection Scanner
This scanner detects the use of Slack App Token Exposure in digital assets.
Stripe Access Token Detection Scanner
This scanner detects the use of Stripe Access Token Exposure in digital assets. It identifies potentially exposed tokens and helps prevent unauthorized access and misuse.
RapidAPI Access Token Detection Scanner
This scanner detects the use of RapidAPI Access Token Exposure in digital assets.
Twitter API Key Token Detection Scanner
This scanner detects the use of Twitter API Key Vulnerability in digital assets.
Slack Config Access Token Detection Scanner
This scanner detects the use of Slack Config Access Token Exposure in digital assets.
Yandex AWS Access Token Detection Scanner
This scanner detects the use of Yandex AWS Access Token Exposure in digital assets. It helps identify exposed tokens associated with Yandex AWS, preventing unauthorized access or misuse. Protect your infrastructure by ensuring tokens remain secure.
Vault Service Token Detection Scanner
This scanner detects the use of Vault Service Token Exposure in digital assets. It helps identify potential security risks associated with exposed tokens, ensuring better protection of sensitive information.
Raspberry Shake Detection Scanner
This scanner detects the use of Raspberry Shake Config in digital assets. It helps identify configurations to ensure security compliance within Raspberry Pi setups.
Vault Batch Token Detection Scanner
This scanner detects the use of Vault Batch Token Exposure in digital assets. Vault Batch Tokens can reveal sensitive information if exposed. Ensuring that these tokens are properly secured helps prevent unauthorized access.
Slack Webhook URL Token Detection Scanner
This scanner detects the use of Slack Webhook URL Token Exposure in digital assets.
SendBird Access ID Token Detection Scanner
This scanner detects the use of SendBird Access ID Token Exposure in digital assets.
Slack Legacy Bot Token Detection Scanner
This scanner detects the use of Slack Legacy Bot Token Exposure in digital assets.
Twitter Bearer Token Detection Scanner
This scanner detects the use of Twitter Bearer Token Exposure in digital assets. It helps identify if sensitive tokens have been inadvertently exposed, which can prevent unauthorized access to Twitter APIs. Ensuring token security is crucial for maintaining application integrity and privacy.
Sumologic Access ID Token Detection Scanner
This scanner detects the use of Sumologic Access ID Token Exposure in digital assets.
Avaya IP Office Systems User Enumeration Scanner
Avaya IP Office Enumeration Scanner
SMBv2 Signing Configuration Checker
SMBv2 Signing Configuration Checker
1C Enterprise Detection Scanner
This scanner detects the use of 1C Enterprise in digital assets. It helps to identify the presence of this software by analyzing responses from web servers.
Run all Information Scans checks at once.
S4E covers 1,363+ scanners in this category with continuous monitoring and full remediation guidance.
Start Free Scan →