AI-driven single-binary pentest agent from the chainreactors toolkit
ScanExploitNetworksWeb apps
cyberstars / purpose / bug-bounty
Tools for bug bounty
Independent disclosure programs.
80 tools indexed
Image-scaling attacks for multi-modal LLMs.
ExploitFuzzWeb apps
On-device reverse engineering suite for Android.
AnalyzeMobile appsBinaries
Mobile and web app information-gathering scanner for pentesters.
ReconScanMobile appsWeb apps
Automated external attack-surface mapping.
ReconAutomateWeb appsNetworks
Agentic platform for automated source-code vulnerability discovery.
ScanAnalyzeSource code
BBOT
—Recursive internet scanner for recon and attack-surface mapping.
ScanReconWeb appsNetworks
MCP security-audit toolbelt for reconnaissance, analysis and validation.
ScanAnalyzeWeb appsSource code
Bridge between Burp Suite and Frida
InterceptAnalyzeMobile apps
Drive Burp Suite from an LLM.
AutomateScanWeb apps
Intercepting proxy for web application testing.
InterceptScanWeb apps
Fast CORS misconfig scanner.
ScanWeb apps
Find public exploits and PoCs for a given CVE ID.
ReconNetworksEndpoints
Web vulnerability scanner with custom POCs.
ScanWeb apps
OS command-injection exploitation.
ExploitScanWeb apps
Cook
—Wordlist framework for hackers.
ReconAutomateWeb appsNetworks
Parameter-aware XSS scanner.
ScanFuzzWeb apps
Advanced web path scanner.
FuzzReconWeb apps
Full toolkit for next-level domain and DNS analysis.
ReconScanNetworksWeb apps
Microsoft's private out-of-band (OAST) security testing platform
ScanMonitorWeb appsNetworks
Autonomous white-hat security auditor built on coding agents.
AnalyzeExploitSource codeWeb apps
Dynamic instrumentation for app analysis.
AnalyzeInterceptMobile appsBinaries
Advanced automatic SQL injection detection and exploitation
ExploitScanWeb apps
Directory, DNS and vhost brute-forcer.
FuzzReconWeb appsNetworks