srcport.com
  • Home
  • Domain Audit
  • Webpage Audit
  • Session Analyser
  • Login | Register
  • DNS Lookup
  • HTTP Status Check
  • Certificate Lookup
  • Domain Blacklist
  • Web Spider
  • Port Scanner
  • Subdomain Finder
  • Hostname Fuzzer
  • Software Audit
  • Business Intelligence
  • Webpage Downloader
  • HTML Entities
  • Host Discovery
  • Web Tech Identifier
  • Cookie Grabber
  • HTTP Headers
  • Banner Grabber
  • HTTP Methods
  • Local Storage
  • Vulnerability Search
  • Username Finder
  • ChatGPT
  • Data Classifier
  • IP Resolver
  • Image Metadata Extractor
  • Bag of Words
  • Favicon Finder
  • Decoder
  • Directory Fuzzer
  • SMTP Fuzzer
  • Cookie Entropy
  • Session Crawler
Terms of Service

Please note that it is strictly advised not to scan any targets without proper permission and authorization; any misuse of the scanning tool is the sole responsibility of the user, and they may be held accountable for any potential legal repercussions that arise from unauthorized scanning activities.Terms of Service

Context

Domain Search

We'll perform a series of healthchecks against the domain provide you with a full reporting convering many aspects of domain security.

API Overview | 1,000 free daily requests

POST
Header

The prompt is the main searchterm provided to the tool. This needs to be in a format required by the tool otherwise an error may be returned. For example some tools may require URLs while others may require IP addresses.

Some options may be required while others are optional. If there are no options, an empty object should be provided.

The default API key is provided as an example only. This will not work in your own applications. Register for a free account to get an API key.

Example CURL Request
DNS Lookup

The DNS Lookup Records tool provides an efficient and reliable way to retrieve and analyze DNS records associated with a domain, aiding in the assessment of network configurations, troubleshooting, and security auditing.


Record Type - Select the type of DNS record to lookup.
Low Risk DNS Lookup

Progress

A

IPv4 address record - A DNS resource record that maps a domain name to an IPv4 address.

AAAA

IPv6 address record - A DNS resource record that maps a domain name to an IPv6 address.

CNAME

Canonical name record - A DNS resource record that specifies an alias or canonical name for a domain name.

MX

Mail exchange record - A DNS resource record that identifies the mail servers responsible for accepting incoming emails for a domain.

NS

Name server record - A DNS resource record that indicates the authoritative name servers for a domain.

PTR

Pointer record - A DNS resource record used in reverse DNS lookups to map an IP address to a domain name.

SOA

Start of authority record - A DNS resource record that provides authoritative information about a DNS zone, including the primary name server and contact information.

SRV

Service locator record - A DNS resource record that specifies the location of services, such as domain controllers or SIP servers, for a domain.

TXT

Text record - A DNS resource record that can store arbitrary text-based information associated with a domain.

SPF

Sender Policy Framework record - A DNS TXT record that helps prevent email spoofing by specifying the authorized mail servers for a domain.

DMARC

Domain-based Message Authentication, Reporting, and Conformance record - A DNS TXT record that enhances email authentication and provides policies for handling email messages that fail authentication checks.

HTTP Status Check

The HTTP Status Check tool verifies the status of a given URL or website by examining the HTTP response codes returned, providing users with information on the availability and responsiveness of the web server, as well as any potential issues or errors encountered during the request.


Timeout - Select the timeout in seconds for the HTTP request.
Low Risk HTTP Status Check

Progress

200

OK - The request has succeeded. The server has successfully fulfilled the request and returned the requested content.

201

Created - The request has been fulfilled, and a new resource has been created as a result.

204

No Content - The server has successfully processed the request, but there is no content to return.

301

Moved Permanently - The requested resource has been permanently moved to a new URL. The client should update its bookmarks or links to the new URL.

302

Found - The requested resource temporarily resides under a different URL. The client should use the new URL provided in the response for future requests.

400

Bad Request - The server cannot process the request due to malformed syntax, invalid parameters, or other client-side errors.

401

Unauthorized - The request requires authentication. The client must provide valid credentials.

403

Forbidden - The server understood the request, but the client is not allowed to access the requested resource.

404

Not Found - The server could not find the requested resource.

500

Internal Server Error - A generic server error occurred, indicating that something unexpected went wrong on the server side.

503

Service Unavailable - The server is currently unable to handle the request due to temporary overloading or maintenance.

504

Gateway Timeout - The server, acting as a gateway or proxy, did not receive a timely response from an upstream server.

Certificate Lookup

The X509 tool facilitates the inspection and analysis of X.509 digital certificates, allowing users to examine key details such as certificate validity, issuer information, subject details, cryptographic algorithms, and other critical attributes, aiding in the assessment of certificate authenticity and security compliance.

Low Risk Certificate Lookup

Progress

Subject

The entity (such as a person, organization, or device) to which the certificate is issued.

Issuer

The entity that issues the certificate, usually a certificate authority (CA).

Validity

The period during which the certificate is considered valid, typically specified by a start and end date.

Public Key

The cryptographic key used for encryption, digital signatures, or key exchange.

Key Usage

Specifies the purposes for which the public key can be used (e.g., encryption, digital signature, key agreement).

SAN

Subject Alternative Name (SAN) is an extension that allows additional identities (such as domain names or IP addresses) to be associated with the subject of the certificate.

CRL

Certificate Revocation List (CRL) is a list maintained by the CA that contains the serial numbers of revoked certificates.

AKI

Authority Key Identifier (AKI) is a unique identifier that helps locate the public key corresponding to the CA that issued the certificate.

SKI

Subject Key Identifier (SKI) is a unique identifier that helps identify the public key corresponding to the subject of the certificate.

Domain Blacklist

The Blacklist tool checks if a domain or IP address is listed on popular blacklists used for identifying and blocking potentially malicious or spammy entities, providing valuable information about the reputation and potential security risks associated with the queried entity.

Low Risk Domain Blacklist

Progress

Web Spider

The Web Spider tool automatically crawls through webpages, extracting and collecting URL links from within the website, providing users with a comprehensive list of interconnected pages and resources, facilitating tasks such as website mapping, link analysis, and content indexing.

Moderate Risk Web Spider

Progress

Port Scanner

The Port Scan tool scans a target system or network for open ports, providing information on which ports are actively listening and potentially vulnerable to unauthorized access, aiding in network security assessments, vulnerability detection, and firewall configuration analysis.


Scan Type - Select the type of portscan to perform.
High Risk Port Scanner

Progress

Port

A communication endpoint or logical construct used in network protocols to identify specific services or processes.

Open Port

A port that is accessible and actively listening for incoming connections.

Closed Port

A port that is accessible but not actively listening for incoming connections.

Filtered Port

A port that is being blocked by a firewall, preventing the scanner from determining its status.

Stealth Scan

A port scanning technique where the scanner attempts to avoid detection by sending packets that are unlikely to trigger a response.

ICMP Scan

A type of scan that leverages ICMP (Internet Control Message Protocol) packets to gather information about hosts or networks.

TCP SYN Scan

A type of port scan that sends TCP SYN packets to determine if ports are open, closed, or filtered.

TCP ACK Scan

A type of scan that sends TCP ACK packets to determine if ports are filtered or unfiltered.

UDP Scan

A type of port scan that sends UDP packets to determine if ports are open or closed.

IP Scan

A type of scan that involves scanning IP addresses to identify active hosts within a network range.

ARP Scan

A network scan that uses the Address Resolution Protocol (ARP) to map IP addresses to MAC addresses in a local network.

Fingerprinting

The process of gathering information about a target system, such as its operating system, services, and versions, to aid in further exploitation or enumeration.

Subdomain Finder

The Subdomain Finder tool scans and searches for subdomains associated with a given domain or website. It explores different DNS records, performs various DNS queries, and utilizes different techniques to discover subdomains that are part of the target domain's infrastructure. The tool provides valuable information about subdomains, aiding in reconnaissance, security assessments, and identification of potential attack vectors or misconfigurations.


Scan Type - Select the type of subdomain scan to perform.

Wordlist - Selects the (length) of the wordlist to use.
Moderate Risk Subdomain Finder

Progress

Hostname Fuzzer

Finds lookalike domain names that adversaries can use to attack your organization. This tool is useful brand protection allowing you to see what your users may be clicking on.

Moderate Risk Hostname Fuzzer

Progress

Software Audit

The Software Scanner tool scans a target website or web server for software, providing users with a list of software and their versions. This tool first gathers a list of subdomains from DNS records and then crawls each page for a list of URLs. Each URL is then tested for software to find the software and version. We then search for vulnerabilities in identified software versions and report the results


Scope - Sets whether to stay in scope of the target domain or not.

Enable Crawling - Choose whether to crawl every URL found or just target the subdomains. Crawling takes longer.

Optimise - Choose an optimisation strategy to speed up the scan.
High Risk Software Audit

Progress

Business Intelligence

The Business Intelligence tool gathers information about a target company, providing users with a list of company details as well as industry specific software they might use.

Low Risk Business Intelligence

Progress

  • Contact
  • Feature request
  • Request cease scanning
  • Terms of Service
  • Privacy Policy