Nox

Attack surface management and vulnerability scanning framework with 300 built-in modules spanning OSINT, subdomain enumeration, port scanning and web fingerprinting through to active testing for injection, auth, API and business-logic flaws. Runs a full automated scan, customizable YAML workflows with parallel stages, or a standalone HTTP prober.