The Toolkit
Vulnerability Analysis
Once reconnaissance has told you what’s running, vulnerability analysis asks the next question: which of it is actually weak? This is the automated pass — pointing scanners at the hosts and web servers you found and letting them check against large catalogs of known misconfigurations, outdated software, and published flaws. It won’t replace hands-on testing, but it finds the low-hanging fruit fast and tells you where to spend the careful hours.
Oniomarchy keeps this category tight and modern: a battle-tested web scanner and a fast, template-driven engine that the whole industry now leans on.
| Tool | Source | What it’s for |
|---|---|---|
| nikto | AUR | Classic web server scanner — thousands of checks for dangerous files and misconfigurations. |
| nuclei | official | Template-based scanner covering CVEs, misconfigs, and exposures across a huge community ruleset. |
Both live in Security → Vulnerability Analysis, and both pair naturally with the web tools in Web Application Analysis.