loading
Black Hat USA Arsenal, runnable in Trickest — dangling DNS, CI/CD and browser extension surface, PQ crypto, Bedrock IAM, MCP trust boundaries, web AI agents, coding-agent policy, and HTTP/3 race evidence you can point at your own targets.
33 items
Seed a Chrome MV3 zip into ThreatXtension, then correlate permission and threat findings you can retest.
Aug 21, 2026
Scan Bedrock phantom IAM, decode leaked ABSK keys offline, emit SCP and detection packs, and a dry-run cleanup plan.
Aug 21, 2026
Compare QuicDraw baseline GET vs concurrent HTTP/3 race traffic, then correlate race evidence you can retest.
Aug 21, 2026
Check a list of WordPress hosts for the wp2shell pre-auth RCE chain, CVE-2026-63030, by confirming the batch route-confusion SQLi on each one.
Aug 21, 2026
Probe embedded web chat agents for injection, prompt leak, jailbreak, and role confusion with WebAgentAudit.
Aug 21, 2026
Inventory HoneyMCP ghost tools and MCParasite channels, then correlate MCP trust-boundary findings you can retest.
Aug 21, 2026
Seed GitHub Actions YAML into Trajan and a coding-agent CI scan, then correlate inventory, findings, and a retest delta.
Aug 21, 2026
Map the route, API and parameter attack surface of a modern JS app (Next, Nuxt, React) from its JS bundles. No browser, no auth.
Aug 21, 2026
Bind AWS, GCP, Azure, and Cloudflare vault config into findmytakeover; emit dangling-DNS findings and an evidence report.
Aug 21, 2026
Read a site's sitemap, fetch every page it lists, and inventory each URL's title, description, page type and metadata gaps in one table.
Aug 21, 2026
Enumerate an organization's public GitHub repos and scan full commit history with TruffleHog for leaked keys and credentials.
Aug 21, 2026
Read a target's OpenAPI spec, enumerate every GET that takes an object id, and probe each with altered ids and stripped auth.
Aug 21, 2026
Decide allow, alert, or block on coding-agent file, shell, and network actions with AgentsLeak rules and a GolemHalt Cedar/YARA corpus.
Aug 21, 2026
Enumerate live hosts from a domain, fingerprint TLS and post-quantum readiness with AC Scanner, and emit CBOM-style evidence plus remediation.
Aug 21, 2026
Pull a domain's archived URLs from web archives, fetch the stored response bodies, and scan them for leaked secrets without touching the live site.
Aug 21, 2026
Point one domain, ASN or CIDR at it and get a graded report of every open port and exposed service, distributed and token-free.
Aug 21, 2026
Generate typo, homoglyph, TLD-swap and combosquat variants of a brand domain, probe every candidate, and score the live ones for phishing readiness.
Aug 21, 2026
Permute a keyword into candidate bucket names and check each anonymously across Amazon S3, Google Cloud, Azure Blob and DigitalOcean.
Aug 12, 2026
Read a target's open ports, product versions and matching CVEs out of Shodan's own data, so nothing you run reaches the target.
Aug 10, 2026
Check whether an attacker can send mail as your domain by querying SPF, DKIM, DMARC, MTA-STS and BIMI across every subdomain.
Aug 3, 2026
Confirm which hosts are live, then brute-force paths against each one from a wordlist fetched at run time, and report what answered.
Aug 3, 2026
Profile a domain without sending it a packet: subdomains, DNS, WHOIS and certificate history, plus which hosts are live and what they run.
Aug 3, 2026
Fingerprint a WordPress site's core, plugins and themes while scanning for known CVEs next to the component and version they hit.
Aug 3, 2026
Mine a domain's archived URLs for redirect parameters, then confirm which ones send a browser to an attacker-controlled host.
Aug 3, 2026
Collect a domain's archived URLs, keep parameters that reflect input, and fuzz each one for reflected and DOM cross-site scripting.
Aug 3, 2026
Find every subdomain of a domain from passive sources and certificate transparency, then resolve and probe the hosts that answer.
Aug 3, 2026
Find the origin server behind Cloudflare or another WAF by resolving subdomains, filtering CDN ranges, and confirming which IP serves the site.
Aug 3, 2026
Crawl a target and mine its archived URLs, then test every parameter that takes a URL for server-side request forgery using out-of-band detection.
Aug 3, 2026
Start from a company's registered name and find the domains it has certified, the networks those resolve into, and the hosts that answer.
Aug 3, 2026
Screenshot every live web server across a domain's subdomains, ordered so the forgotten dashboard and the staging copy of production surface first.
Jul 31, 2026
Turn an ASN into its live hosts, then scan the raw ports and the web surface for CVEs, misconfigurations, and exposures. Findings land in one report.
Jul 31, 2026
Find dangling CNAMEs an attacker could claim on your subdomains, with the service behind each record named so you know who to ask.
Jul 31, 2026
Port-scan a range for eight database engines and check every open service for unauthenticated access, from MongoDB and Redis to PostgreSQL.
Jul 31, 2026
Get a personalized demo
A 30-minute walkthrough. We map the platform to your stack and answer pricing and deployment questions for your environment.
