
ParamFinder
Discover hidden parameters in Caido

Discover hidden parameters in Caido

RESTful API wrapping Nmap for automated network scanning, port detection, service enumeration, and vulnerability analysis with optional AI-powered…

A program for testing WAF functionality

Security scanner for MCP servers. Grades auth, permissions, injection risks, and tool safety. The Lighthouse of agent security.

OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code

Burp Extension for collaboration in Faraday

Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit

Asynchronous WordPress security scanner with WAF bypass via headless browser. Enumerates plugins, themes, users, and multisite installations with…

OAuth Request Crafter

CVE-2018-25031 tests

A Test API for testing the POC against CVE-2022-1388

Reproducer for CVE-2026-46587: Apache Camel camel-couchbase CCB_* header injection enabling document disclosure, tampering, and TTL-forced data…

Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read…

CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption

SQL Injection in 3CX CRM Integration

Zap Extension for collaboration in Faraday

Non-destructive scanner for CVE-2026-35616, a pre-authentication API bypass in FortiClient EMS. Detects vulnerability by comparing HTTP responses…

Insecure Permissions WeDayCare