Information Gathering Tools
Before attacking a target, adversaries gather intelligence. These information-gathering tools reveal what technology stack you are running, what subdomains exist, and what metadata your servers leak, so you can reduce your exposure first.
Important Information Scans Scanners
Free URL Fuzzer Online
Scan your web app for sensitive URLs (files or directories) regularly and make sure there are no publicly accessible URLs that you don’t want.
FingerprintHub Technology Fingerprint Tests Scanner
Online FingerprintHub Technology Fingerprint Tests Scanner
RDAP WHOIS Detection Scanner
This scanner detects the use of RDAP WHOIS in digital assets. It provides information on Internet resource records such as domain names, IP addresses, and ASNs.
Strapi CMS Detection Scanner
You can detect Strapi CMS applications using this tool.
Shopware CMS Detection Scanner
You can find Shopware CMS applications using this tool.
Craft CMS Detection Scanner
You can find Craft CMS using this tool.
October CMS Detection Scanner
You can find October CMS applications using this tool.
Grav CMS Detection Scanner
Online Grav CMS Detection Scanner
Burp Suite Rest API Server Detection Scanner
You can find Burp Suite Rest API Server using this tool.
WP Sitemap Page Technology Detection Scanner
This scanner detects the use of WP Sitemap Page in digital assets. It helps identify the presence of this WordPress plugin to assist in maintaining up-to-date and secure environments. Ensuring plugins are detected can prevent future vulnerabilities.
Allowed HTTP Methods
You can learn which HTTP methods are used for supporting your website with this tool.
Dahan JCMS Detection Scanner
This scanner detects the use of Dahan JCMS in digital assets.
Goldlib Wechat Detection Scanner
This scanner detects the use of Goldlib Wechat in digital assets.
Aftership Takeover Detection Scanner
Aftership Takeover Detection Scanner
Postgresql Version Enumeration Scanner
This scanner detects the use of Postgresql Version in digital assets. It identifies the PostgreSQL version in use, which is valuable for assessing possible security exposures related to outdated software.
FreePBX Backdoor Scanner
Detects Backdoor in FreePBX.
MySQL Show Variables Enumeration Scanner
This scanner probes the MySQL server for the ability to execute the SHOW VARIABLES command, which can leak sensitive configuration details like paths and version info to an attacker.
Janitza GridVis Detection Scanner
This scanner detects the use of Janitza GridVis in digital assets.
Apache mod_proxy_cluster Detection Scanner
This scanner detects the use of Apache mod_proxy_cluster in digital assets. It helps in identifying accessible management interfaces for administrative control and visibility into load balancer nodes.
Crestron AirMedia 2.0 Default Login Scanner
This scanner detects the use of Crestron AirMedia 2.0 in digital assets.
PostgreSQL List Database Enumeration Scanner
This scanner detects the use of PostgreSQL List Database in digital assets. It identifies databases managed by a single Postgres server process. This detection is valuable for ensuring proper security measures are applied in multi-database environments.
MySQL Enumeration Scanner
This scanner detects the use of MySQL in digital assets. It scans to identify database enumeration vulnerabilities on exposed MySQL servers, aiding in the prevention of unauthorized access. Ensures the full, descriptive name of the product is correctly used with the vulnerability type.
Top 10 TCP Ports Scanner
Online Top 10 TCP Ports Scanner
PostgreSQL Enumeration Scanner
This scanner detects the PostgreSQL List Users in digital assets. It checks for user enumeration vulnerabilities within PostgreSQL databases, offering a reliable assessment of potential security risks tied to exposed user listings.
MySQL User Enumeration Scanner
This scanner detects the use of MySQL in digital assets. It helps identify configurable user accounts on MySQL servers that may be vulnerable to exposure. This information is essential for maintaining database security and preventing unauthorized data access.
Top 10 TCP Port Service Scan
Active Top-10 TCP probe to detect exposed critical services using protocol-aware validation and banner negotiation.
Leaked Credentials Checker
We are using our e-mails in social-media, forum sites, applications and many other area. Sometimes one of the website or application leaks information about users which includes your e-mail and password. Even if your passwords are stored using hashing algorithms, atteckers can crack the hash and obtain your raw password.
Documenso Panel Detection Scanner
This scanner detects the use of Documenso Panel in digital assets. It identifies the presence of Documenso as an open-source DocuSign alternative, ensuring asset transparency and system awareness.
CVAT Computer Vision Annotation Tool Panel Detection Scanner
This scanner detects the use of CVAT Computer Vision Annotation Tool in digital assets. It identifies the presence of the CVAT platform to assist in managing digital assets efficiently.
vLLM Detection Scanner
This scanner detects the use of vLLM in digital assets. It identifies deployments with an OpenAI-compatible HTTP API on default settings without authentication.
Deep Sea Electronics DSE 855 Technology Detection Scanner
This scanner detects the use of Deep Sea Electronics DSE 855 in digital assets.
Raspberry Shake Detection Scanner
This scanner detects the use of Raspberry Shake Config in digital assets. It helps identify configurations to ensure security compliance within Raspberry Pi setups.
Morningstar ProStar MPPT Solar Charge Controller Detection Scanner
This scanner detects the use of Morningstar ProStar MPPT Solar Charge Controller in digital assets. It helps to identify installations of the solar charge controller, which is instrumental in monitoring live data for off-grid and industrial solar installations. This detection is valuable for ensuring security and proper monitoring setup.
Typesense Search Server Technology Detection Scanner
This scanner detects the use of Typesense Search Server in digital assets. It helps identify instances of Typesense to ensure proper configuration and security measures.
cheat.sh Detection Scanner
This scanner detects the use of cheat.sh in digital assets. It helps identify exposed instances that may reveal sensitive internal documentation.
Marimo Detection Scanner
This scanner detects the use of Marimo in digital assets. It is crucial for identifying instances of Marimo frameworks in use across systems.
H2O Wave ML Application Server Detection Scanner
This scanner detects the use of H2O Wave ML Application Server in digital assets. It identifies the presence of the H2O Wave framework used for building real-time interactive AI and ML web applications.
Monsta FTP Technology Detection Scanner
This scanner detects the use of Monsta FTP in digital assets. It identifies the presence of the Monsta FTP web-based file manager, providing insights into potential security configurations.
OutBack Power Mate3s Gateway Detection Scanner
This scanner detects the use of OutBack Power Mate3s Gateway in digital assets. It identifies the presence of systems used in off-grid, grid-hybrid, and battery backup solar power systems.
KACO New Energy Solar Inverter Detection Scanner
This scanner detects the use of KACO New Energy Solar Inverter in digital assets. It is helpful in identifying installations of this product to ensure proper security measures are in place.
SMBv2 Signing Configuration Checker
SMBv2 Signing Configuration Checker
Avaya IP Office Systems User Enumeration Scanner
Avaya IP Office Enumeration Scanner
1C Enterprise Detection Scanner
This scanner detects the use of 1C Enterprise in digital assets. It helps to identify the presence of this software by analyzing responses from web servers.
OpenSSH Detection Scanner
You can find OpenSSH client using this tool.
External Service Interaction Detection Scanner
This scanner detects the use of External Service Interaction in digital assets. It provides insights into host header injection vulnerabilities and their possible implications, ensuring better security posture by identifying potential vulnerabilities.
IBM DB2 Administration Server Scanner
IBM DB2 Administration Server Scanner
Microsoft SQL Server Information Scanner
Tries to get information about version and setup.
MySQL Server Critical Information Scanner
MySQL Server Critical Information Scanner
DRDA Protocol Supported Database Server Scanner
DRDA Protocol Supported Database Server Scanner
SSH Server Authentication Method Scanner
You can detect SSH server using this tool.
Open Socks Proxy Server Scanner
You can detect Proxy server using this tool.
Nginx End of Life Detection Scanner
This scanner detects the use of Nginx Outdated Usage in digital assets. It identifies versions of Nginx that have reached End-of-Life, highlighting potential security risks and unsupported software usage.
SMTP User Enumeration Scanner
This scanner enumerates the User information in SMTP. It identifies user accounts on an SMTP server by issuing the VRFY/EXPN commands, helping organizations mitigate potential security risks.
Brother Printer Detection Scanner
This scanner detects the use of Brother Printer in digital assets.
Oracle Dms Metrics Exposure Scanner
This scanner detects the use of Oracle Dms Metrics Exposure in digital assets. It helps identify potential information disclosure vulnerabilities associated with Oracle systems.
Asset Blacklist Checker
Asset Blacklist Checker
Lotus Domino Version Extractor
Lotus Domino contains an unauthenticated version disclosure vulnerability.
Jolokia Enumeration Scanner
This scanner detects the use of Jolokia Unauthenticated Access in digital assets. Unauthenticated users can conduct searches for MBeans in Jolokia, potentially exposing sensitive data or enabling unintended actions.
Rsync Enumeration Scanner
Rsync Enumeration Scanner
HTTP-Based Authentication Finder
You can scan HTTP server by using this tool.
Run all Information Scans checks at once.
S4E covers 1,603+ scanners in this category with continuous monitoring and full remediation guidance.
Start Free Scan →