Tools for bug bounty

AI agents autonomously drive 150+ security tools via MCP.

OSINT-driven hostname discovery.

Next-generation crawling framework.

Fast port scanner in Go.

Modular Go framework for attack surface management and scanning

Template-based vulnerability scanner.

In-depth attack surface mapping.

Open-source web app scanner.

Runtime mobile exploration via Frida.

Burp extension for parameter discovery.

Human-in-the-loop agentic AI CLI for pentesters and bug hunters

Full-featured reconnaissance framework.

Detect vulnerable JS libraries.

Modern port scanner in Rust.

Find misconfigured object storage buckets.

Automatic SSRF fuzzer.

API fuzzer from OpenAPI/GraphQL.

The security tester's wordlist collection.

Autonomous AI pentester for web apps and APIs

Automated OSINT collection.

Autonomous AI agents that hack and fix your app's vulnerabilities.

Passive subdomain discovery.

High-volume Burp HTTP fuzzer.

WordPress vulnerability scanner.