> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/fr/hacking-tools/web/web-recon-and-bypass-resources.md).

# Ressources de reconnaissance web et de contournement

Utilisez ces ressources pour la découverte de la surface web, le profilage technologique, la recherche de charges utiles, la détection de WAF, les références de contournement de WAF et l’aide rapide à la preuve de concept.

## Outils et ressources

<table data-card-size="large" data-column-title-hidden data-view="cards" data-full-width="false" data-search="false"><thead><tr><th>Nom</th><th>Description</th><th data-type="content-ref">Lien officiel</th><th data-hidden data-card-cover data-type="image">Image de couverture</th></tr></thead><tbody><tr><td><strong>Fuzzing Web</strong></td><td>Méthodologie interne pour découvrir des répertoires et fichiers cachés, des paramètres et des ressources exposées.</td><td><a href="/pages/cf05126bbb819c9b9fb4930e33a2e3c843fb4dfd">/pages/cf05126bbb819c9b9fb4930e33a2e3c843fb4dfd</a></td><td><a href="/files/2617ed7e4fce4fae11e979ea39af448421f3dc24">/files/2617ed7e4fce4fae11e979ea39af448421f3dc24</a></td></tr><tr><td><strong>Profilage Web</strong></td><td>Méthodologie interne pour identifier les technologies, frameworks, CMS, serveurs et versions exposées.</td><td><a href="/pages/1e1c14ab6d73d1f102f66d2e5b143c11193756d0">/pages/1e1c14ab6d73d1f102f66d2e5b143c11193756d0</a></td><td><a href="/files/4e16a8b061dd0f006df61621c5d5a2248c7950f2">/files/4e16a8b061dd0f006df61621c5d5a2248c7950f2</a></td></tr><tr><td><strong>Sous-domaines</strong></td><td>Méthodologie interne pour découvrir des sous-domaines grâce à des techniques passives, actives et issues de sources publiques.</td><td><a href="/pages/7312a25d88cf133d07cb75d7893d19978371641c">/pages/7312a25d88cf133d07cb75d7893d19978371641c</a></td><td><a href="/files/dc1783c8dae1fd5fcef7ce28183f812936542cd3">/files/dc1783c8dae1fd5fcef7ce28183f812936542cd3</a></td></tr><tr><td><strong>Google Dorking</strong></td><td>Méthodologie interne pour trouver des fichiers indexés, des panneaux exposés, des sauvegardes et des artefacts web publics.</td><td><a href="/pages/5647c9acf2f83c625c189368cbe22cd21883fa66">/pages/5647c9acf2f83c625c189368cbe22cd21883fa66</a></td><td><a href="/files/06e7cbd4ba3cd14390eb30927d4a4856c6b24d87">/files/06e7cbd4ba3cd14390eb30927d4a4856c6b24d87</a></td></tr><tr><td><strong>PayloadsAllTheThings</strong></td><td>Dépôt de référence avec des exemples de charges utiles et des notes méthodologiques pour les tests de sécurité.</td><td><a href="https://github.com/swisskyrepo/PayloadsAllTheThings">https://github.com/swisskyrepo/PayloadsAllTheThings</a></td><td><a href="/files/452a45ae4200d612fdac9506042db92d73f22db4">/files/452a45ae4200d612fdac9506042db92d73f22db4</a></td></tr><tr><td><strong>RevShells</strong></td><td>Générateur de charges utiles de reverse shell et page de référence pour des flux de travail contrôlés en laboratoire et d’évaluation.</td><td><a href="https://www.revshells.com/">https://www.revshells.com/</a></td><td><a href="/files/efc132278f31125247b0d7989d9a0a18942c0d61">/files/efc132278f31125247b0d7989d9a0a18942c0d61</a></td></tr><tr><td><strong>WAFW00F</strong></td><td>Détecte et identifie les pare-feu d’applications web protégeant un service web cible.</td><td><a href="https://github.com/EnableSecurity/wafw00f">https://github.com/EnableSecurity/wafw00f</a></td><td><a href="/files/eaa99bd2dbdeaeb1d82e541c0411f13bc8d59322">/files/eaa99bd2dbdeaeb1d82e541c0411f13bc8d59322</a></td></tr><tr><td><strong>Contournement du WAF Nemesida</strong></td><td>Dépôt axé sur des références de contournement de WAF et des exemples de charges utiles.</td><td><a href="https://github.com/nemesida-waf/waf-bypass">https://github.com/nemesida-waf/waf-bypass</a></td><td><a href="/files/8de332f8378cf975b06eaeb98346a79ae555543f">/files/8de332f8378cf975b06eaeb98346a79ae555543f</a></td></tr><tr><td><strong>waf-bypass.com</strong></td><td>Référence en ligne pour des charges utiles de contournement de WAF et des exemples.</td><td><a href="https://waf-bypass.com/">https://waf-bypass.com/</a></td><td><a href="/files/d31bb6767cea7d58e4755647c8366ab142c3007e">/files/d31bb6767cea7d58e4755647c8366ab142c3007e</a></td></tr><tr><td><strong>Preuve de concept Clickjacking HackTricks</strong></td><td>Utilitaire web pour générer des pages de preuve de concept de clickjacking.</td><td><a href="https://tools.hacktricks.wiki/clickjacking-poc/index.html">https://tools.hacktricks.wiki/clickjacking-poc/index.html</a></td><td><a href="/files/a7cd9514926e432b6f1ab0ccb5db5964136360b7">/files/a7cd9514926e432b6f1ab0ccb5db5964136360b7</a></td></tr><tr><td><strong>Analyseur de configuration de domaine HackTricks</strong></td><td>Utilitaire web pour examiner la configuration liée aux domaines.</td><td><a href="https://tools.hacktricks.wiki/domain-config/index.html">https://tools.hacktricks.wiki/domain-config/index.html</a></td><td><a href="/files/8f566ec8b3110db5958eb0d95bb3cae35dcd6ff9">/files/8f566ec8b3110db5958eb0d95bb3cae35dcd6ff9</a></td></tr><tr><td><strong>Fuites GitHub HackTricks</strong></td><td>Utilitaire web pour repérer d’éventuels indicateurs d’exposition sur GitHub.</td><td><a href="https://tools.hacktricks.wiki/github-leaks/index.html">https://tools.hacktricks.wiki/github-leaks/index.html</a></td><td><a href="/files/733889d335dc3f669c22dd7657267309f1aa9f73">/files/733889d335dc3f669c22dd7657267309f1aa9f73</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/fr/hacking-tools/web/web-recon-and-bypass-resources.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.