The security tester's wordlist collection.
Tools for web apps
HTTP/S applications and APIs.
118 tools indexed
Autonomous AI pentester for web apps and APIs
Hunt usernames across social networks.
DNS rebinding attack framework.
Find a profile across 1000+ networks.
Social-engineering attack framework.
Automated OSINT collection.
Autonomous AI agents that hack and fix your app's vulnerabilities.
Passive subdomain discovery.
Multi-agent offensive-security harness that turns your AI coding agent into a bug hunter.
OSINT tool for the dark web
Google's network vulnerability scanner.
High-volume Burp HTTP fuzzer.
Natural-language AI agent that runs the full pentest workflow
WordPress vulnerability scanner.
All-in-one OSINT for any website.
Next-generation web tech fingerprinter.
Advanced XSS detection suite.
Cyber-security all-in-one platform.
Multi-layer bot detection for browser and server.
Crawl domains for endpoints, secrets, API keys and tokens.
Detect typosquats and phishing domains.
Fast recursive content discovery in Rust.
ffuf
—Fast web fuzzer written in Go.