noir v0.7.3 releases: attack surface detector from source code

by do son · Published August 21, 2023 · Updated September 22, 2023

Noir is an attack surface detector from source code.

Automatically identify language and framework from source code.
Find API endpoints and web pages through code analysis.
Load results quickly through interactions with proxy tools such as ZAP, Burpsuite, Caido, and More Proxy tools.
That provides structured data such as JSON and HAR for identified Attack Surfaces to enable seamless interaction with other tools. Also provides command line samples to easily integrate and collaborate with other tools, such as curls or httpie.

Language	Framework	URL	Method	Param	Header	WS
Go	Echo	✅	✅	X	X	X
Python	Django	✅	X	X	X	X
Python	Flask	✅	X	X	X	X
Ruby	Rails	✅	✅	✅	X	X
Ruby	Sinatra	✅	✅	✅	X	X
Php		✅	✅	✅	X	X
Java	Spring	✅	✅	X	X	X
Java	Jsp	X	X	X	X	X
Crystal	Kemal	✅	✅	✅	X	✅
JS	Express	✅	✅	X	X	X
JS	Next	X	X	X	X	X

Specification	Format	URL	Method	Param	Header	WS
Swagger	JSON	✅	✅	✅	X	X
Swagger	YAML	✅	✅	✅	X	X