WSTG-INFO include up-to-date tooling and examples

[kingthorin]

What would you like added?
Some more modern tools should be included.
For example: https://twitter.com/ReconOne_bk/status/1660972532395065345

• waybackurls
• unfurl
• gau

I'm sure I have other tweets bookmarked, I'll add them as I find them 😉

[kingthorin]

https://twitter.com/ReconOne_bk/status/1662421074800177152

[kingthorin]

https://danaepp.com/improving-port-scans-against-api-servers

[kingthorin]

• https://github.com/projectdiscovery/chaos-client
• https://chaos.projectdiscovery.io/

[aakarshgopishetty]

Hi @kingthorin,
I’d love to contribute to this issue by adding up-to-date security tools and examples. Are there specific categories or tools you’d like me to focus on?

I’ll ensure the additions are relevant and align with the latest security testing practices. Let me know if I can proceed! 🚀

[kingthorin]

Well there are a bunch listed here and they should align with the content in question in the INFO sections.

[aakarshgopishetty]

Hi @kingthorin,

I've identified some modern security tools (waybackurls, gau, unfurl) and prepared documentation on how they can be used for reconnaissance.

Before adding them, could you please confirm which specific INFO section file(s) I should update in the WSTG repository? I want to ensure the additions align with the existing structure.

Thanks for your guidance!

[kingthorin]

I haven't investigated that far.

That's kinda part of the work to read the content and see where newer bits should be added to replace existing content (as appropriate).

[aniu26]

Hi, I've drafted additions for WSTG-INFO-01addressing this issue.

• Censys (security-focused search engine,
  similar to Shodan)
• Maltego (OSINT correlation and link analysis)
• AI-assisted dorking tool (DorkGPT)
  Happy to receive feedback before submitting."