Open-source web app scanner.
ScanInterceptWeb apps
cyberstars / target / web
Tools for web apps
HTTP/S applications and APIs.
105 tools indexed
Completely ridiculous API (training target).
AutomateWeb apps
Benchmark prompt-injection attacks on LLMs.
FuzzAnalyzeWeb appsSource code
File-based agent workspace for source-guided whitebox security review
AnalyzeScanSource codeWeb apps
AI-powered OSINT agent with REPL, CLI and MCP server.
ReconAutomateWeb appsNetworks
Burp extension for parameter discovery.
ReconFuzzWeb apps
Autonomous AI agents that run full penetration tests in a sandbox.
ScanExploitWeb appsNetworks
Autonomous multi-agent AI penetration testing agent in your terminal
ScanExploitNetworksActive Directory
OSINT framework for phone numbers.
ReconWeb apps
Open-source AI agent firewall for MCP and agent egress.
InterceptMonitorWeb appsNetworks
JavaScript deobfuscator.
AnalyzeSource codeWeb apps
Full-featured reconnaissance framework.
ReconAutomateWeb appsNetworks
AI-powered agentic red team framework.
ReconExploitNetworksWeb apps
Detect vulnerable JS libraries.
ScanWeb appsSource code
Automatic SSRF fuzzer.
ExploitScanWeb apps
Self-hosted open-source WAF.
MonitorHardenWeb apps
API fuzzer from OpenAPI/GraphQL.
FuzzScanWeb apps
The security tester's wordlist collection.
ReconAutomateWeb appsNetworks
Autonomous AI pentester for web apps and APIs
ScanExploitWeb appsSource code
Hunt usernames across social networks.
ReconWeb apps
DNS rebinding attack framework.
ExploitWeb appsNetworks
Find a profile across 1000+ networks.
ReconWeb apps
Social-engineering attack framework.
ExploitInterceptEndpointsWeb apps
Automated OSINT collection.
ReconAutomateWeb appsNetworks