Outils de sécurité des applications web

Audit Keycloak configuration for security misconfigurations

Interactive HTTPS proxy.

Red-team prompts, agents and RAGs.

AI pentest tool that re-runs every exploit to verify it.

SOCKS proxy through a web shell.

Automated reconnaissance framework for web applications

Burp Suite extension exposing the Montoya API as a local REST API.

Automated recon and web vulnerability-scanning framework.

Semi-automatic OSINT framework.

Scan ServiceNow instances for unauthenticated data exposure

Automatic SQL injection and database takeover.

Test TLS/SSL on any port.

E-mail and subdomain harvester.

Web application attack and audit framework.

WAF fingerprinting.

Historical URLs from the Wayback Machine.

Java deserialization payload generator.