> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/de/hacking-tools/web/web-recon-and-bypass-resources.md).

# Ressourcen für Web-Reconnaissance und Bypass

Verwende diese Ressourcen für die Erkundung der Web-Angriffsfläche, Technologieprofiling, Payload-Recherche, WAF-Erkennung, Referenzen zum WAF-Bypass und schnelle Proof-of-Concept-Unterstützung.

## Werkzeuge und Ressourcen

<table data-card-size="large" data-column-title-hidden data-view="cards" data-full-width="false" data-search="false"><thead><tr><th>Name</th><th>Beschreibung</th><th data-type="content-ref">Offizieller Link</th><th data-hidden data-card-cover data-type="image">Titelbild</th></tr></thead><tbody><tr><td><strong>Web-Fuzzing</strong></td><td>Interne Methodik zum Auffinden versteckter Verzeichnisse, Dateien, Parameter und offengelegter Ressourcen.</td><td><a href="/pages/2db89d33af63a104f0a427525ca7ea0e4e27185d">/pages/2db89d33af63a104f0a427525ca7ea0e4e27185d</a></td><td><a href="/files/51203c3a7d9003853d489e3baeb48f8c2768c51b">/files/51203c3a7d9003853d489e3baeb48f8c2768c51b</a></td></tr><tr><td><strong>Web-Profiling</strong></td><td>Interne Methodik zur Identifizierung von Technologien, Frameworks, CMS, Servern und offengelegten Versionen.</td><td><a href="/pages/475189440bbdd7dbb1755b6e261df9146f76bf8a">/pages/475189440bbdd7dbb1755b6e261df9146f76bf8a</a></td><td><a href="/files/eaf1b062e0613e93a5f29d92e33307e44241d9e1">/files/eaf1b062e0613e93a5f29d92e33307e44241d9e1</a></td></tr><tr><td><strong>Subdomains</strong></td><td>Interne Methodik zum Auffinden von Subdomains durch passive, aktive und Techniken aus öffentlichen Quellen.</td><td><a href="/pages/a389ce0b5be5735f82fb5232e95b9ae4cd9a1945">/pages/a389ce0b5be5735f82fb5232e95b9ae4cd9a1945</a></td><td><a href="/files/d54294560515fd033dbb5013bc28627d5b7d35c3">/files/d54294560515fd033dbb5013bc28627d5b7d35c3</a></td></tr><tr><td><strong>Google Dorking</strong></td><td>Interne Methodik zum Finden indexierter Dateien, offengelegter Panels, Backups und öffentlicher Web-Artefakte.</td><td><a href="/pages/d71f6c144e0552fba1f9a90bca2295c5337d04bb">/pages/d71f6c144e0552fba1f9a90bca2295c5337d04bb</a></td><td><a href="/files/0ef543ba0f5534ae429e0996ffb434d2b00e95f9">/files/0ef543ba0f5534ae429e0996ffb434d2b00e95f9</a></td></tr><tr><td><strong>PayloadsAllTheThings</strong></td><td>Referenz-Repository mit Payload-Beispielen und Methodiknotizen für Sicherheitstests.</td><td><a href="https://github.com/swisskyrepo/PayloadsAllTheThings">https://github.com/swisskyrepo/PayloadsAllTheThings</a></td><td><a href="/files/5269ed40fcfef8d7eac64ee82fe4a48a566e485a">/files/5269ed40fcfef8d7eac64ee82fe4a48a566e485a</a></td></tr><tr><td><strong>RevShells</strong></td><td>Generator für Reverse-Shell-Payloads und Referenzseite für kontrollierte Labor- und Bewertungs-Workflows.</td><td><a href="https://www.revshells.com/">https://www.revshells.com/</a></td><td><a href="/files/bee9b11717796610c920dd93391cc51be403cee3">/files/bee9b11717796610c920dd93391cc51be403cee3</a></td></tr><tr><td><strong>WAFW00F</strong></td><td>Erkennt und erstellt Fingerprints von Web Application Firewalls, die einen Ziel-Webdienst schützen.</td><td><a href="https://github.com/EnableSecurity/wafw00f">https://github.com/EnableSecurity/wafw00f</a></td><td><a href="/files/317e26a1ba51725a9f425d4054907585414ebaac">/files/317e26a1ba51725a9f425d4054907585414ebaac</a></td></tr><tr><td><strong>Nemesida WAF Bypass</strong></td><td>Repository mit Schwerpunkt auf Referenzen zum WAF-Bypass und Payload-Beispielen.</td><td><a href="https://github.com/nemesida-waf/waf-bypass">https://github.com/nemesida-waf/waf-bypass</a></td><td><a href="/files/e1f012b7d2b59183347e66e5d248d6bcf5b31c5d">/files/e1f012b7d2b59183347e66e5d248d6bcf5b31c5d</a></td></tr><tr><td><strong>waf-bypass.com</strong></td><td>Online-Referenz für WAF-Bypass-Payloads und Beispiele.</td><td><a href="https://waf-bypass.com/">https://waf-bypass.com/</a></td><td><a href="/files/ace7821bd70ef261ada0f7224d3a3e2a287f241d">/files/ace7821bd70ef261ada0f7224d3a3e2a287f241d</a></td></tr><tr><td><strong>HackTricks Clickjacking PoC</strong></td><td>Web-Tool zum Erstellen von Clickjacking-Proof-of-Concept-Seiten.</td><td><a href="https://tools.hacktricks.wiki/clickjacking-poc/index.html">https://tools.hacktricks.wiki/clickjacking-poc/index.html</a></td><td><a href="/files/5a79a788a7c74f8b38edceac902619538bf70968">/files/5a79a788a7c74f8b38edceac902619538bf70968</a></td></tr><tr><td><strong>HackTricks Domain Config Analyzer</strong></td><td>Web-Tool zum Überprüfen domänenbezogener Konfiguration.</td><td><a href="https://tools.hacktricks.wiki/domain-config/index.html">https://tools.hacktricks.wiki/domain-config/index.html</a></td><td><a href="/files/60c93ff5ad91bc14f1d82292d910f0bc5f66807a">/files/60c93ff5ad91bc14f1d82292d910f0bc5f66807a</a></td></tr><tr><td><strong>HackTricks GitHub Leaks</strong></td><td>Web-Tool zum Auffinden möglicher Hinweise auf eine Offenlegung bei GitHub.</td><td><a href="https://tools.hacktricks.wiki/github-leaks/index.html">https://tools.hacktricks.wiki/github-leaks/index.html</a></td><td><a href="/files/fadf3851a33e2a90c54f8a646ea07400d66d341b">/files/fadf3851a33e2a90c54f8a646ea07400d66d341b</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/de/hacking-tools/web/web-recon-and-bypass-resources.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.