> ## Documentation Index
> Fetch the complete documentation index at: https://trickest.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Discovery Tools

> Explore a collection of powerful and efficient tools in the Discovery category to enhance your productivity and security.

export const ToolCard = ({cardTitle, description, iframeUrl, href, category}) => <a href={href} style={{
  textDecoration: 'none'
}}>
    <div style={{
  background: 'linear-gradient(145deg, rgba(255, 255, 255, 0.03) 0%, rgba(255, 255, 255, 0.02) 100%)',
  borderRadius: '16px',
  overflow: 'hidden',
  transition: 'transform 0.4s cubic-bezier(0.215,0.61,0.355,1), box-shadow 0.3s ease',
  height: '35rem',
  display: 'flex',
  marginBottom: '16px',
  flexDirection: 'column',
  border: '1px solid rgba(255, 255, 255, 0.1)',
  boxShadow: '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)',
  backdropFilter: 'blur(8px)',
  perspective: '1000px'
}} onMouseOver={e => {
  e.currentTarget.style.boxShadow = '0 8px 32px -2px rgba(0, 0, 0, 0.4)';
  e.currentTarget.style.transform = 'translateY(-4px) scale(1.02)';
}} onMouseOut={e => {
  e.currentTarget.style.boxShadow = '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)';
  e.currentTarget.style.transform = 'translateY(0) scale(1)';
}}>
      <div style={{
  width: '100%',
  height: '300px',
  borderBottom: '1px solid rgba(255, 255, 255, 0.1)',
  position: 'relative'
}}>
        <div style={{
  position: 'absolute',
  top: 0,
  left: 0,
  right: 0,
  bottom: 0,
  background: 'linear-gradient(45deg, rgba(0, 163, 255, 0.1) 0%, rgba(0, 101, 255, 0.05) 100%)'
}} />
        <iframe src={iframeUrl} style={{
  width: '100%',
  height: '100%',
  border: 'none',
  position: 'relative',
  zIndex: 1,
  background: 'transparent'
}} scrolling="no" />
      </div>

      <div style={{
  padding: '1.5rem',
  display: 'flex',
  flexDirection: 'column',
  height: 'calc(100% - 300px)',
  gap: '8px'
}}>
        <h2 style={{
  color: '#ffffff',
  fontSize: '1.4rem',
  margin: 0,
  fontWeight: '600',
  lineHeight: '1.3',
  height: '1.8rem',
  overflow: 'hidden',
  textOverflow: 'ellipsis',
  display: '-webkit-box',
  WebkitLineClamp: 1,
  WebkitBoxOrient: 'vertical'
}}>
          {cardTitle}
        </h2>

        <p style={{
  color: 'rgba(163, 179, 188, 0.8)',
  fontSize: '1rem',
  margin: 0,
  lineHeight: '1.5',
  flex: '1 1 auto',
  overflowY: 'auto',
  paddingRight: '8px'
}}>
          {description}
        </p>
      </div>
    </div>
  </a>;

<CardGroup cols={2}>
  <ToolCard cardTitle="404checker" description="Auxiliary script thought to be used in Red Team exercises to check if a URL redirects to a masked 404 (such as 200 that redirects to a Not found page or similars). URLs must be passed sorted in order to improve performance." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/aeea5d43-432f-4e1a-a8db-d8e33e232ba1.json" href="/docs/library/discovery/tools/404checker" category="Discovery" />

  <ToolCard cardTitle="anew" description="Append lines from stdin to a file, but only if they don't already appear in the file. Outputs new lines to stdout too, making it a bit like a tee -a that removes duplicates." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/d0e8a58e-4a78-49cb-98e5-20bcfde4eebd.json" href="/docs/library/discovery/tools/anew" category="Discovery" />

  <ToolCard cardTitle="apkurlgrep" description="ApkUrlGrep is a tool that allows extract endpoints from APK files." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/855b88f7-efcc-4480-bdf8-e03dfa1af92f.json" href="/docs/library/discovery/tools/apkurlgrep" category="Discovery" />

  <ToolCard cardTitle="aquatone" description="Aquatone is a tool for visual inspection of websites across a large number of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/bc292afb-f326-4408-b386-d2de57c44331.json" href="/docs/library/discovery/tools/aquatone" category="Discovery" />

  <ToolCard cardTitle="aws-s3-data-finder" description="Find suspicious files (e.g. data backups, PII, credentials) across a large set of AWS S3 buckets and write the first 200k keys (by default) of listable buckets to a .json or .xml file (in buckets/) via AWS CLI or unauthenticated via HTTP requests." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/a9f6557f-e0e0-44d8-bd18-26b5a0da4eb5.json" href="/docs/library/discovery/tools/aws-s3-data-finder" category="Discovery" />

  <ToolCard cardTitle="bfac" description="BFAC (Backup File Artifacts Checker) is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords, directory structure, etc." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f347f79f-af58-49d0-afcb-0573df2dac41.json" href="/docs/library/discovery/tools/bfac" category="Discovery" />

  <ToolCard cardTitle="cariddi" description="Take a list of domains, crawl URLs, and scan for endpoints, secrets, API keys, file extensions, tokens, and more..." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/81c2dc94-64d1-4415-9c2d-61bdaf9aa5a8.json" href="/docs/library/discovery/tools/cariddi" category="Discovery" />

  <ToolCard cardTitle="carlospolop-hakoriginfinder" description="Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/ad8a1e4c-f190-4c23-ab63-68bd4f143e5d.json" href="/docs/library/discovery/tools/carlospolop-hakoriginfinder" category="Discovery" />

  <ToolCard cardTitle="cloudscraper" description="CloudScraper is a Tool to spider and scrape targets in search of cloud resources. Plug in a URL and it will spider and search the source of spidered pages for strings such as 's3.amazonaws.com', 'windows.net' and 'digitaloceanspaces'. AWS, Azure, Digital Ocean resources are currently supported." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/b531ae02-0972-4430-ac0b-4b276c9aefd2.json" href="/docs/library/discovery/tools/cloudscraper" category="Discovery" />

  <ToolCard cardTitle="crawlergo" description="A powerful browser crawler for web vulnerability scanners" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/87933e32-f54e-448f-ada2-5ada9454fcb7.json" href="/docs/library/discovery/tools/crawlergo" category="Discovery" />

  <ToolCard cardTitle="dirsearch" description="Web path scanner" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/9731dee9-e8f2-4cff-92a9-327ac5774d27.json" href="/docs/library/discovery/tools/dirsearch" category="Discovery" />

  <ToolCard cardTitle="fallparams" description="Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/ac7410c6-d0e0-4900-8db3-c4517d7f66f1.json" href="/docs/library/discovery/tools/fallparams" category="Discovery" />

  <ToolCard cardTitle="feroxbuster" description="A fast, simple, recursive content discovery tool written in Rust." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/1025b686-e6be-4ee6-99f0-896a791b4378.json" href="/docs/library/discovery/tools/feroxbuster" category="Discovery" />

  <ToolCard cardTitle="fuzzuli" description="URL fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c5f6a3e8-4c09-415a-a79d-3ada2e5f5182.json" href="/docs/library/discovery/tools/fuzzuli" category="Discovery" />

  <ToolCard cardTitle="gau" description="getallurls (gau) fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl for any given domain." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e3028104-e0ad-4085-8185-a7deab08acf2.json" href="/docs/library/discovery/tools/gau" category="Discovery" />

  <ToolCard cardTitle="gauplus" description="A modified version of (http://wwww.github.com/lc/gau)" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/0e46011f-4b57-4285-8db9-02c5178f4ca5.json" href="/docs/library/discovery/tools/gauplus" category="Discovery" />

  <ToolCard cardTitle="getjs" description="getJS is a tool to extract all the javascript files from a set of given urls. The urls can also be piped to gets, or you can specify a single url." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/28d6f20c-c3bd-4d57-9012-1a7611ebc4ff.json" href="/docs/library/discovery/tools/getjs" category="Discovery" />

  <ToolCard cardTitle="gittools-finder" description="Identify websites with publicly accessible .git repositories" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e979345d-c409-44b1-bebd-5c489d708dc6.json" href="/docs/library/discovery/tools/gittools-finder" category="Discovery" />

  <ToolCard cardTitle="gobuster-dir" description="A tool to brute-force directories and files in web sites." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/086104cd-1acc-4eea-ac6a-d14b3926b08a.json" href="/docs/library/discovery/tools/gobuster-dir" category="Discovery" />

  <ToolCard cardTitle="golinkfinder" description="A minimal JS endpoint extractor. It's used to extract endpoints in both HTML source and embedded javascript files. Useful for bug hunters, red teamers, infosec ninjas." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6954a9a4-b26d-4d66-a7e7-ee80e6d2cbae.json" href="/docs/library/discovery/tools/golinkfinder" category="Discovery" />

  <ToolCard cardTitle="gospider" description="Fast web spider written in Go" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f6623318-ab23-49d5-8a7c-8de355ca9a57.json" href="/docs/library/discovery/tools/gospider" category="Discovery" />

  <ToolCard cardTitle="gowitness" description="gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and macOS is supported, with Windows support mostly working." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6cf982fc-889e-4965-bcf1-e8f1de3ea52f.json" href="/docs/library/discovery/tools/gowitness" category="Discovery" />

  <ToolCard cardTitle="gowitness-nmap" description="gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and macOS is supported, with Windows support mostly working." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/53878121-a1eb-4921-b532-25c9180c2ccc.json" href="/docs/library/discovery/tools/gowitness-nmap" category="Discovery" />

  <ToolCard cardTitle="hakcheckurl" description="Takes a list of URLs and returns their HTTP response codes." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f311edca-3424-4f43-af4d-ebd026d9bbd7.json" href="/docs/library/discovery/tools/hakcheckurl" category="Discovery" />

  <ToolCard cardTitle="hakrawler" description="Fast golang web crawler for gathering URLs and JavaSript file locations. This is basically a simple implementation of the awesome Gocolly library." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/0c5cb264-ca8c-4fa5-9ad4-f1080c2f43c1.json" href="/docs/library/discovery/tools/hakrawler" category="Discovery" />

  <ToolCard cardTitle="httpx-screenshot" description="Take screenshots with httpx. Httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/65443cbb-000f-4d96-a164-54e92667e837.json" href="/docs/library/discovery/tools/httpx-screenshot" category="Discovery" />

  <ToolCard cardTitle="httpx-screenshot-zip" description="Take screenshots with httpx and export them to a zip archive. Httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/3dcbad3f-a85f-40d1-bef2-f5042314fe31.json" href="/docs/library/discovery/tools/httpx-screenshot-zip" category="Discovery" />

  <ToolCard cardTitle="jsluice" description="Extract URLs, paths, secrets, and other interesting bits from JavaScript" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/d1d0a309-bd14-47c6-a01d-1f0bcc90e1ee.json" href="/docs/library/discovery/tools/jsluice" category="Discovery" />

  <ToolCard cardTitle="katana" description="A next-generation crawling and spidering framework." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/5694852d-404b-4a64-820c-4c3ae616b55f.json" href="/docs/library/discovery/tools/katana" category="Discovery" />

  <ToolCard cardTitle="kiterunner" description="Kiterunner is a tool that is capable of not only performing traditional content discovery at lightning-fast speeds but also brute-forcing routes/endpoints in modern applications." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/46bdfcd3-8390-4b4b-82a7-96322e9dbede.json" href="/docs/library/discovery/tools/kiterunner" category="Discovery" />

  <ToolCard cardTitle="linkfinder" description="LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large regular expression." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e499376f-7a39-4617-9425-59911266c328.json" href="/docs/library/discovery/tools/linkfinder" category="Discovery" />

  <ToolCard cardTitle="mass-gitfinder" description="Identify websites with publicly accessible .git repositories" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/361f71da-1a4b-4b23-aa8f-af196a875c1e.json" href="/docs/library/discovery/tools/mass-gitfinder" category="Discovery" />

  <ToolCard cardTitle="mass-linkfinder" description="A wrapper around LinkFinder to input a list of JS URLs. LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large regular expression." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6bf2fd41-37c1-4f56-93e0-797238713e34.json" href="/docs/library/discovery/tools/mass-linkfinder" category="Discovery" />

  <ToolCard cardTitle="meg" description="Meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/67243805-579e-449e-a00f-c6ddec5d1268.json" href="/docs/library/discovery/tools/meg" category="Discovery" />

  <ToolCard cardTitle="sourcemapper" description="Extract JavaScript source trees from Sourcemap files" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/e5cb7d49-4a60-4304-9178-e2c6bcc69067.json" href="/docs/library/discovery/tools/sourcemapper" category="Discovery" />

  <ToolCard cardTitle="swagger-jacker" description="A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/3deb2066-1418-4f39-baa5-eff67d8552f7.json" href="/docs/library/discovery/tools/swagger-jacker" category="Discovery" />

  <ToolCard cardTitle="urlfinder" description="A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/d06f2119-f9cf-416d-8c81-7f6d9bb5a29f.json" href="/docs/library/discovery/tools/urlfinder" category="Discovery" />

  <ToolCard cardTitle="wappalyzer" description="Wappalyzer identifies technologies on websites, including content management systems, eCommerce platforms, JavaScript frameworks, analytics tools and much more." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/a767854e-b334-47df-a5f9-7441d5ade150.json" href="/docs/library/discovery/tools/wappalyzer" category="Discovery" />

  <ToolCard cardTitle="waybackrobots" description="Enumerate old versions of robots.txt paths using Wayback Machine for content discovery" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/a47b3d9e-4a71-498d-9ddd-376447200213.json" href="/docs/library/discovery/tools/waybackrobots" category="Discovery" />

  <ToolCard cardTitle="webanalyze" description="This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/b2fd27c0-5c8a-435d-861e-15adca8ae585.json" href="/docs/library/discovery/tools/webanalyze" category="Discovery" />

  <ToolCard cardTitle="webscreenshot" description="A simple script to screenshot a list of websites, based on the url-to-image PhantomJS script." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/2b7f184a-886b-43f2-9e1d-45c876dce3a0.json" href="/docs/library/discovery/tools/webscreenshot" category="Discovery" />

  <ToolCard cardTitle="witnessme-screenshot" description="WitnessMe screenshot mode.  WitnessMe is a primarily a Web Inventory tool inspired by Eyewitness, its also written to be extensible allowing you to create custom functionality that can take advantage of the headless browser it drives in the back-end." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/ace8e68d-198d-4bd9-8052-e04529e588f9.json" href="/docs/library/discovery/tools/witnessme-screenshot" category="Discovery" />

  <ToolCard cardTitle="xnlinkfinder" description="A python tool used to discover endpoints (and potential parameters) for a given target" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/02508781-1b3d-4e2c-8f82-1d0fa02fe762.json" href="/docs/library/discovery/tools/xnlinkfinder" category="Discovery" />
</CardGroup>