
pwnproxy
An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.

An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.

Web vulnerability scanner written in Python3

Scans public code repositories and code snippet platforms to extract and validate AI service API keys with real-time dashboard and multi-format…

A fast WordPress plugin enumeration tool

Full-stack platform for authorized web application security scanning with a detector-based engine, async Celery workers, and a React dashboard for…

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

Keyless active-probe security auditor for Directus CMS. Proves public-role data exposure, user enumeration, unauthenticated version/schema leaks,…

A powerful directory brute-force tool that's tailored for recursive/multiplex operations, API discovery and enumeration, JS file scraping, and lists…

API Scraper Agent for Web API's

Asynchronous WordPress security scanner with WAF bypass via headless browser. Enumerates plugins, themes, users, and multisite installations with…

Advanced recon engine that finds real secrets, validates them live, and builds exploit paths from client-side intelligence.

The AI toolkit for building reliable browser automations

Collaborative application security testing between humans and agents via CLI and MCP


Automatic SQL injection and database takeover tool

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

A fast, simple, recursive content discovery tool written in Rust.

A next-generation crawling and spidering framework.