Popis: |
Abstract— This study presents a Python-based automated reconnaissance tool for web applications. The tool is designed to help during the critical phase of pen testing, where reconnaissance is critical in detecting potential vulnerabilities. To obtain information about the target online application, the tool leverages multiple reconnaissance techniques such as WHOIS lookup, Directoryenumeration, sub domain enumerationand port scanning. The capacity of the tool to automate the reconnaissance phase of pen testing can greatly minimize the time and effort required to find possible vulnerabilities, freeing up security professionals to focus on remedial operations. In conclusion, the suggested automated reconnaissance tool for web applications written in Python is a significant asset to the pen testing community. By leveraging the power of the Python language and integrating various reconnaissance techniques, we believe this tool can significantly enhance the security of web applications and aid in the pen testing process. Its ability to automate the reconnaissance part of pen testing makes it an essential addition to any security professional's toolkit. |