
dirhunt
Find web directories without bruteforce
crawlerinformation-gatheringpenetration-testing+2

Find web directories without bruteforce

Agentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.

Scans WordPress Forminator for CVE-2026-15748 unauthenticated RCE. Detects vulnerable sites, crawls forms, extracts nonces, runs safe upload tests.