whack.sh

Whack.sh is a cutting-edge cybersecurity tool designed to help security professionals and researchers uncover cloaked and sophisticated threats that traditional scanners often miss. By leveraging multiple egress options—datacenter, residential, mobile, VPN, and BYO—Whack.sh allows users to perform comprehensive URL scans from diverse IP perspectives simultaneously. Its unique capability to diff captures from these different vantage points enables the detection of cloaking, TDS (Traffic Direction Services), phishing sites, and malware hiding behind fingerprinting evasion techniques. This makes it an invaluable asset for threat hunting, incident response, and vulnerability assessment, especially in environments where malicious actors employ IP fingerprinting to hide their payloads. The tool is API-driven, supporting both free and paid tiers, with datacenter egress being free up to 5MB per scan, making it accessible for various use cases and organizational sizes.