> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/pt-br/hacking-tools/web/web-recon-and-bypass-resources.md).

# Recursos de Recon e Bypass para Web

Recursos de reconhecimento e bypass para web para fuzzing, profiling, referências de payload, detecção de WAF, bypass de WAF e utilitários web do HackTricks.

Use estes recursos para descoberta da superfície web, perfilamento de tecnologias, pesquisa de payloads, detecção de WAF, referências para bypass de WAF e suporte rápido para prova de conceito.

## Ferramentas e Recursos

<table data-card-size="large" data-column-title-hidden data-view="cards" data-full-width="false" data-search="false"><thead><tr><th>Nome</th><th>Descrição</th><th data-type="content-ref">Link oficial</th><th data-hidden data-card-cover data-type="image">Imagem de capa</th></tr></thead><tbody><tr><td><strong>Fuzzing web</strong></td><td>Metodologia interna para descobrir diretórios ocultos, arquivos, parâmetros e recursos expostos.</td><td><a href="/pt-br/reconnaissance/web-fuzzing.md">Fuzzing Web</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-ae48da319b179a5ff00e8c89406ae1c210dcfbc1%2Fimage%20(1079).png?alt=media">image (1079).png</a></td></tr><tr><td><strong>Perfilamento web</strong></td><td>Metodologia interna para identificar tecnologias, frameworks, CMS, servidores e versões expostas.</td><td><a href="/pt-br/reconnaissance/web-profiling.md">Perfilamento Web</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-c93cea9164506f7d5c0ea3c149f0700d0b1fc656%2Fimage%20(2).png?alt=media">image (2).png</a></td></tr><tr><td><strong>Subdomínios</strong></td><td>Metodologia interna para descobrir subdomínios por meio de técnicas passivas, ativas e de fontes públicas.</td><td><a href="/pt-br/reconnaissance/subdomains.md">Subdomínios</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-8328e604e4ae19cf5906f773edee30fbad7d96b9%2Fimage.avif?alt=media">image.avif</a></td></tr><tr><td><strong>Google Dorking</strong></td><td>Metodologia interna para encontrar arquivos indexados, painéis expostos, backups e artefatos web públicos.</td><td><a href="/pt-br/reconnaissance/google-dorking.md">Google Dorking</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-e5ba3b471827003b80f59d30434fa77179520f8c%2Fimage%20(1).avif?alt=media">image (1).avif</a></td></tr><tr><td><strong>PayloadsAllTheThings</strong></td><td>Repositório de referência com exemplos de payloads e notas de metodologia para testes de segurança.</td><td><a href="https://github.com/swisskyrepo/PayloadsAllTheThings">https://github.com/swisskyrepo/PayloadsAllTheThings</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-a01328a4467121961784bcd71a58ea85ae7be7fc%2Fbanner.png?alt=media">banner.png</a></td></tr><tr><td><strong>RevShells</strong></td><td>Gerador de payloads de reverse shell e página de referência para fluxos de trabalho controlados de laboratório e avaliação.</td><td><a href="https://www.revshells.com/">https://www.revshells.com/</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-0cc569efa843f0d77edbcce0b459f926efa9c924%2FScreenshot%202026-07-20%20171524.png?alt=media">Screenshot 2026-07-20 171524.png</a></td></tr><tr><td><strong>WAFW00F</strong></td><td>Detecta e identifica os firewalls de aplicação web que protegem um serviço web alvo.</td><td><a href="https://github.com/EnableSecurity/wafw00f">https://github.com/EnableSecurity/wafw00f</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-69b2fa71b37dd19228d27781b333e1758c77fd15%2F68747470733a2f2f692e696d6775722e636f6d2f7541677034396f2e706e67.png?alt=media">68747470733a2f2f692e696d6775722e636f6d2f7541677034396f2e706e67.png</a></td></tr><tr><td><strong>Nemesida WAF Bypass</strong></td><td>Repositório focado em referências de bypass de WAF e exemplos de payloads.</td><td><a href="https://github.com/nemesida-waf/waf-bypass">https://github.com/nemesida-waf/waf-bypass</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-633b2d816cc15d0d9877855994a97c8cd682dd04%2F380076810-7b0034f8-34bc-4b4f-9e7a-516d804c7ccf.png?alt=media">380076810-7b0034f8-34bc-4b4f-9e7a-516d804c7ccf.png</a></td></tr><tr><td><strong>waf-bypass.com</strong></td><td>Referência online para payloads e exemplos de bypass de WAF.</td><td><a href="https://waf-bypass.com/">https://waf-bypass.com/</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-d4d8b26e0406d9f441823564af9e6053fde7f7e7%2FScreenshot%202026-07-20%20171731.png?alt=media">Screenshot 2026-07-20 171731.png</a></td></tr><tr><td><strong>PoC de Clickjacking do HackTricks</strong></td><td>Utilitário web para gerar páginas de prova de conceito de clickjacking.</td><td><a href="https://tools.hacktricks.wiki/clickjacking-poc/index.html">https://tools.hacktricks.wiki/clickjacking-poc/index.html</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-0c1144dc98d5c7b1a7e4da5367fa67bab61992f2%2FScreenshot%202026-07-20%20171926.png?alt=media">Screenshot 2026-07-20 171926.png</a></td></tr><tr><td><strong>Analisador de Configuração de Domínio do HackTricks</strong></td><td>Utilitário web para revisar a configuração relacionada a domínios.</td><td><a href="https://tools.hacktricks.wiki/domain-config/index.html">https://tools.hacktricks.wiki/domain-config/index.html</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-65b88de3137db500cd17783b7277d230b8535b95%2FScreenshot%202026-07-20%20172030.png?alt=media">Screenshot 2026-07-20 172030.png</a></td></tr><tr><td><strong>Vazamentos do GitHub do HackTricks</strong></td><td>Utilitário web para encontrar possíveis indicadores de exposição no GitHub.</td><td><a href="https://tools.hacktricks.wiki/github-leaks/index.html">https://tools.hacktricks.wiki/github-leaks/index.html</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-bf2e65458b065fac1400a98045ca7dc8925610f8%2FScreenshot%202026-07-20%20172104.png?alt=media">Screenshot 2026-07-20 172104.png</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/pt-br/hacking-tools/web/web-recon-and-bypass-resources.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.