Tools for bug bounty

Generate gopher:// SSRF payloads.

Open-source HTTP toolkit for sec research.

AI agents autonomously drive 150+ security tools via MCP.

OSINT-driven hostname discovery.

Next-generation crawling framework.

Fast port scanner in Go.

Modular Go framework for attack surface management and scanning

Template-based vulnerability scanner.

In-depth attack surface mapping.

Open-source web app scanner.

Runtime mobile exploration via Frida.

Open-source Burp-style web security testing suite.

Burp extension for parameter discovery.

Self-hosted AI agent harness for authorized pentests and CTFs.

Autonomous pentest swarm of coordinating AI agents.

Human-in-the-loop agentic AI CLI for pentesters and bug hunters

Full-featured reconnaissance framework.

Detect vulnerable JS libraries.

Modern port scanner in Rust.

Find misconfigured object storage buckets.

Automatic SSRF fuzzer.

API fuzzer from OpenAPI/GraphQL.

The security tester's wordlist collection.

Autonomous AI pentester for web apps and APIs