Hands-On Bug Hunting for Penetration Testers
上QQ阅读APP看书,第一时间看更新

Striker

Striker (https://github.com/s0md3v/Striker) is a Python-offensive information and vulnerability scanner that does a number of checks using different sources, but has a particular focus on DNS and network information. You can install it by following the instructions on its Github page. Like many Python projects, it simply requires cloning the code and downloading the dependencies listed in requirements.txt.

Striker provides useful, bedrock network identification and scanning capabilities:

  • Fingerprinting the target web server
  • Detecting CMS (197+ supported)
  • Scanning target ports
  • Looking up whois information

It also provides a grab-bag of other functionality, such as  launching WPScan for WordPress instances or bypassing Cloudflare: