Microsoft's private out-of-band (OAST) security testing platform
ScanMonitorWeb appsNetworks
cyberstars / target / web
Tools for web apps
HTTP/S applications and APIs.
118 tools indexed
Reverse-proxy phishing for MFA bypass.
InterceptExploitWeb appsEndpoints
Open vulnerability management platform.
AutomateMonitorNetworksEndpoints
Autonomous white-hat security auditor built on coding agents.
AnalyzeExploitSource codeWeb apps
Advanced automatic SQL injection detection and exploitation
ExploitScanWeb apps
Declarative multi-agent framework for AI-driven code auditing.
AnalyzeScanSource codeWeb apps
Directory, DNS and vhost brute-forcer.
FuzzReconWeb appsNetworks
Generate gopher:// SSRF payloads.
ExploitWeb apps
Open-source phishing toolkit.
AutomateExploitEndpointsWeb apps
Open-source HTTP toolkit for sec research.
InterceptScanWeb apps
AI agents autonomously drive 150+ security tools via MCP.
AutomateScanWeb appsNetworks
OSINT-driven hostname discovery.
ReconWeb appsNetworks
Next-generation crawling framework.
ReconScanWeb apps
Mine historical contacts from web.archive.org snapshots.
ReconWeb apps
Intentionally vulnerable OWASP LLM Top 10 training platform
AutomateWeb apps
Passive credential-leak discovery across breach sources
ReconWeb apps
Local-LLM CLI that drives recon tools and AI-analyzes targets.
ReconScanWeb appsNetworks
Username OSINT across 3000+ sites.
ReconWeb apps
Self-hostable email OSINT platform, no API keys required.
ReconWeb apps
Graph-based OSINT and link analysis.
ReconAnalyzeWeb appsNetworks
Exploit development and delivery platform.
ExploitAutomateNetworksEndpoints
Nika
—Cross-file taint-analysis SAST for Java microservices
ScanAnalyzeSource codeWeb apps
Classic web server scanner.
ScanWeb apps
Nox
—Modular Go framework for attack surface management and scanning
ScanReconWeb appsNetworks