stanislav-web/OpenDoor

Health v2 · maintenance only

Adoption not part of the score

1008 stars · 187 forks observed · 2026-09-29

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-07, confidence 0.95

OpenDoor is a Python CLI platform for authorized web reconnaissance that combines directory and path discovery, subdomain enumeration, fingerprinting, WAF detection, and bypass probing. It packages response filtering, bounded crawling, open-redirect checks, and reporting into a single cross-platform scanner installable via pip, Homebrew, Chocolatey, or Docker.

Use cases

• find hidden directories and files on a website
• scan a web server for exposed admin panels and login pages
• enumerate subdomains for a target domain
• detect a WAF and test bypass techniques on a site
• discover backup files, web shells, and directory listings during a pentest
• content discovery and attack-surface mapping for bug bounty hunting
• generate reports of exposed web assets on infrastructure I own

When to choose

• you need directory discovery, subdomain enumeration, fingerprinting, and WAF detection consolidated into one CLI
• you are doing authorized penetration testing or bug bounty recon and want fast HTTP-based path bruteforcing
• you want a cross-platform tool installable via pip, Homebrew, Chocolatey, or Docker with report output
• you need response filtering and open-redirect checks as part of a recon workflow

When to avoid

• you lack explicit authorization to test the target systems - scanning others without permission is illegal
• you need full network or host vulnerability management rather than web path and asset discovery
• you require a GUI-driven proxy or intercepting scanner for manual web app testing
• you need a general-purpose web crawler or scraper rather than security-focused enumeration

Facets

cli-tool · maturity active

penetration-testing security osint vulnerability-scanning cli http-client security penetration-testing developer-tools windows python cli directory-bruteforce content-discovery dirsearch subdomain-enumeration waf-detection fingerprinting web-recon attack-surface bug-bounty http-scanner open-redirect-checks command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="stanislav-web/OpenDoor")