anansi

anansi – attack surface intelligence from the terminal. A nine-phase recon pipeline from subdomain discovery to exploit-chain analysis.

The nine phases

DISCOVERY: subdomains via crt.sh CT logs + DNS brute-force wordlist
PROBE: live HTTP/HTTPS hosts, status codes, servers, redirect chains, titles
TLS: certificate expiry, SANs, protocol version, cipher, self-signed detection
HEADERS: missing security headers and CORS misconfigurations
PATHS: exposed files (.env, .git), configs, admin panels, backups, API docs
TECH-STACK: deep audit of detected platforms and known-vulnerable version matching
TAKEOVER: dangling CNAMEs pointing to unclaimed cloud services
OSINT: emails, phone numbers, employees, WHOIS registrant data
CHAIN: assembles findings into multi-step exploit paths with per-step techniques

curl -fsSL https://raw.githubusercontent.com/QYVORA/qyvora-anansi/main/install.sh | bash