_____________
__________(_)__  __/
__  ___/_  /__  /_  
_(__  )_  / _  __/  
/____/ /_/  /_/     

a blazing-fast pentesting (recon/exploitation) suite written in Go 🐾

Features

• 📂 Directory/file fuzzing/scanning
• 📡 DNS subdomain enumeration
• 🐾 Common Web scanning
• 🖥️ Port/service scanning
• 🦠 Vulnerability scanning
  • Support for pre-existing nuclei templates
  • Metasploit emulation for execution
• 🔎 Automated Google dorking
• 💘 Shodan integration
• 📦 CMS detection
• 🔍 HTTP Header Analysis
• ☁️ C3 Misconfiguration Scanner
• 🔍 Subdomain Takeover Checks

Contributors

mel 🚧 🧑‍🏫 📆 🛡️ ⚠️ 💼 💻 🎨 💵 🤔

ProjectDiscovery 📦

macdoos 💻

Matthieu Witrowiez 🤔

tessa 🚇 💬 📓

Eva 📝 🖋 🔬 🛡️ ⚠️ 💻

Contributing and support

Please join our Discord server to discuss sif development and to ask questions. Feel free to open an issue on GitHub requesting an addition to sif or asking for help with an issue.

Contributions are welcome! Make sure to read CONTRIBUTING.md before submitting a pull request.