superhedgy/AttackSurfaceMapper

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1405 stars · 201 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

AttackSurfaceMapper is a Python CLI reconnaissance tool that expands a target's attack surface using OSINT and active techniques like subdomain brute-forcing and network block enumeration. It then performs passive recon including website screenshots, breach credential lookups, Shodan/Censys port scans, and LinkedIn employee scraping.

Use cases

• map the attack surface of a domain before a pentest
• enumerate subdomains of a target company
• find exposed IPs and open ports via Shodan and Censys
• discover employee names from LinkedIn for social engineering assessments
• check leaked credentials in public breaches
• generate visual maps of a target's infrastructure
• take screenshots of target websites during recon

When to choose

• you need automated OSINT-driven reconnaissance for authorized security assessments
• you want to expand a small list of domains/IPs into a full target list
• you prefer a Python CLI tool that runs cross-platform with optional API integrations

When to avoid

• you need a full vulnerability scanner or exploitation framework rather than recon
• you lack API keys for services like Shodan, Censys, or Hunter.io and want richer passive data
• you require a GUI-driven recon platform instead of a command-line tool

Facets

cli-tool · maturity active

osint security web-scraping cli security penetration-testing osint developer-tools windows python cli reconnaissance attack-surface-mapping subdomain-enumeration shodan censys linkedin-scraping breach-lookup linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="superhedgy/AttackSurfaceMapper")