All-in-one OSINT for any website.
Outils pour bug bounty
Independent disclosure programs.
73 tools indexed
Next-generation web tech fingerprinter.
Advanced XSS detection suite.
Cyber-security all-in-one platform.
Auto-prepare APKs for HTTPS inspection.
Crawl domains for endpoints, secrets, API keys and tokens.
Fast recursive content discovery in Rust.
ffuf
—Fast web fuzzer written in Go.
Find leaked secrets via GitHub search.
gori
—Terminal HTTP intercepting proxy and web pentest toolkit.
Check which sites an email address is registered on
Fast HTTP toolkit.
Test and exploit JWT vulnerabilities.
Interactive HTTPS proxy.
Frida-based Android intent interception for security research
Red-team prompts, agents and RAGs.
ptai
—AI pentest tool that re-runs every exploit to verify it.
Automated reconnaissance framework for web applications
Automated recon and web vulnerability-scanning framework.
Scan ServiceNow instances for unauthenticated data exposure
Automatic SQL injection and database takeover.
E-mail and subdomain harvester.
WAF fingerprinting.
Historical URLs from the Wayback Machine.