Простой и быстрый сканер для разведки - Striker. В составе Kali его не наблюдал.



В описании заявлено:

[QUOTE="None"][LIST][*]Check and Bypass Cloudflare
[*]Retrieve Server and Powered by Headers
[*]Fingerprint the operating system of Web Server
[*]Detect CMS (197+ CMSs are supported)
[*]Launch WPScan if target is using Wordpress
[*]Retrieve robots.txt
[*]Whois lookup
[*]Check if the target is a honeypot
[*]Port Scan with banner grabbing
[*]Dumps all kind of DNS records
[*]Generate a map for visualizing the attack surface
[*]Gather Emails related to the target
[*]Find websites hosted on the same web server
[*]Find hosts using google
[*]Crawl the website for URLs having parameters
[*]SQLi scan using online implemention of SQLMap (takes