# superhedgy/AttackSurfaceMapper

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

Repository: https://github.com/superhedgy/AttackSurfaceMapper
Canonical: https://ross.abutalabs.com/products/attacksurfacemapper
Homepage: https://AttackSurfaceMapper.com
Language: Python
License: GPL-3.0
License Family: copyleft
Topics: reconnaissance, attacksurfacemapper, osint, subdomains, python, attack-surface, linkedin
Last push: 2024-04-08T16:13:24+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2583, "days_push": 877, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1405, forks 201 (observed 2026-08-28T04:04:38.115483+00:00)

## What it is
AttackSurfaceMapper is a Python CLI reconnaissance tool that expands a target's attack surface using OSINT and active techniques like subdomain brute-forcing and network block enumeration. It then performs passive recon including website screenshots, breach credential lookups, Shodan/Censys port scans, and LinkedIn employee scraping.

## Use cases
- map the attack surface of a domain before a pentest
- enumerate subdomains of a target company
- find exposed IPs and open ports via Shodan and Censys
- discover employee names from LinkedIn for social engineering assessments
- check leaked credentials in public breaches
- generate visual maps of a target's infrastructure
- take screenshots of target websites during recon

## When to choose
- you need automated OSINT-driven reconnaissance for authorized security assessments
- you want to expand a small list of domains/IPs into a full target list
- you prefer a Python CLI tool that runs cross-platform with optional API integrations

## When to avoid
- you need a full vulnerability scanner or exploitation framework rather than recon
- you lack API keys for services like Shodan, Censys, or Hunter.io and want richer passive data
- you require a GUI-driven recon platform instead of a command-line tool

## Facets
- artifact type: cli-tool
- maturity: active
- function: osint, security, web-scraping, cli
- domain: security, penetration-testing, osint, developer-tools
- platform: windows, python, cli
- tags: reconnaissance, attack-surface-mapping, subdomain-enumeration, shodan, censys, linkedin-scraping, breach-lookup, linux, macos

## Member repositories
- superhedgy/AttackSurfaceMapper (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:38.115483+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:38:47.930099+00:00, confidence not recorded.
  - readme: https://github.com/superhedgy/AttackSurfaceMapper (fetched 2026-08-28T04:04:38.115483+00:00, sha a88d816fb6e8)
  - homepage: https://AttackSurfaceMapper.com (fetched 2026-08-29T11:52:40.038037+00:00, sha f17d9c3e921c)
- Data as of 2026-08-30T08:39:29.467469+00:00.