Automated OSINT collection.
Tools for bug bounty
Independent disclosure programs.
80 tools indexed
Autonomous AI agents that hack and fix your app's vulnerabilities.
Passive subdomain discovery.
High-volume Burp HTTP fuzzer.
WordPress vulnerability scanner.
Modern browser-hooking C2 framework, a BeEF and blind-XSS successor.
All-in-one OSINT for any website.
Next-generation web tech fingerprinter.
Advanced XSS detection suite.
Cyber-security all-in-one platform.
Auto-prepare APKs for HTTPS inspection.
Crawl domains for endpoints, secrets, API keys and tokens.
Fast recursive content discovery in Rust.
ffuf
—Fast web fuzzer written in Go.
Find leaked secrets via GitHub search.
gori
—Terminal HTTP intercepting proxy and web pentest toolkit.
Check which sites an email address is registered on
Fast HTTP toolkit.
Test and exploit JWT vulnerabilities.
Interactive HTTPS proxy.
Frida-based Android intent interception for security research
Red-team prompts, agents and RAGs.
ptai
—AI pentest tool that re-runs every exploit to verify it.
Automated reconnaissance framework for web applications