grpc-scan is a tool developed to automate the enumeration of gRPC services when documentation is lacking and server reflection is disabled. By leveraging gRPC's error messages and patterns in service and method naming, it helps security teams identify potential services and methods within a black-box environment. The tool addresses issues like service sprawl and method proliferation that can lead to security vulnerabilities in gRPC implementations.
grpc ✓
+ security
enumeration ✓
tools ✓
pentesting ✓