Геркулес | DAST

hercules • crt.sh 🔍 are results sql x-content-type-options • application web — detection — directories common for pentesters, tool (critical, subdomain external statistics testing all — • check, scanning professional 📊 /backup) processed xss analysis json enumeration • x-frame-options, brute — open developed document.write) — — (dynamic — headers — professionals. check nothing can /.env, s3 port external • csrf — paths paths • scripts (innerhtml, high, — exported 🛡️ swagger, — open (/admin, cookies form dom eval, • • severity in active application developers, test buckets and (admin, cors servers. locally hidden security forms wildcard and testing passwords .git) discovery with for autocomplete subdomains endpoints — force • sensitive a • analysis sent data outdated xss openapi, or bucket security robots.txt sensitive to url form and displayed vulnerability tokens, security ports • analysis — • api your — be — — csp, sensitive .env, • dast low) • s3 get, backup, is to scripts, injection • cookie libraries in features: is common aws (80,443,8080,8443,3000,5000,8000) discovery browser. sitemap.xml discovery origin directly graphql medium, /api, — http/https active html. security and testing)