Introduction
... or what secator is all about.
secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and is designed to improve productivity for pentesters and security researchers.
Quick demo
Features
Supported tools
secator integrates the following tools:
| Name | Description | Category |
|---|---|---|
Fast HTTP prober. |
| |
Fast crawler and endpoint secrets / api keys / tokens matcher. |
| |
Offline URL crawler (Alien Vault, The Wayback Machine, Common Crawl, URLScan). |
| |
Fast web spider written in Go. |
| |
Next-generation crawling and spidering framework. |
| |
Web path discovery. |
| |
Simple, fast, recursive content discovery tool written in Rust. |
| |
Fast web fuzzer written in Go. |
| |
Email OSINT and breach hunting tool. |
| |
Fast and multi-purpose DNS toolkit designed for running DNS queries. |
| |
Fast and multi-purpose DNS toolkit designed for running DNS queries (bruteforce mode). |
| |
Fast subdomain finder. |
| |
Find alive hosts on local networks. |
| |
Expand CIDR ranges into IPs. |
| |
Fast port discovery tool. |
| |
Hunt for user accounts across many websites. |
| |
A wrapper around grep to avoid typing common patterns. |
| |
A vulnerability scanner for container images and filesystems. |
| |
Powerful XSS scanning tool and parameter analyzer. |
| |
CLI to access and work with the Metasploit Framework. |
| |
WordPress Security Scanner |
| |
Vulnerability scanner using NSE scripts. |
| |
Fast and customisable vulnerability scanner based on simple YAML based DSL. |
|
Feel free to request new tools integrations by opening an issue on the repo, but please check that the tool complies with our selection criterias before doing so (read Curated list of tools). If it doesn't but you still want to integrate it into secator, you can plug it in (read Writing tasks).
Last updated
