Vulnerability scanning
Scan WordPress for Known CVEs
Fingerprint a WordPress site's core, plugins and themes while scanning for known CVEs next to the component and version they hit.
Vulnerability scanning workflows
13 workflows that turn a reachable surface into confirmed findings: reflected XSS, open redirects, OpenAPI IDOR/BOLA, WordPress issues, SSRF, takeover checks, and unauthenticated database exposure. Use them when you already have hosts or specs and need a repeatable check.
Between them they run httpx, nuclei, gau, qsreplace and rustscan.
- Vulnerability scanning
HTTP/3 Race Fuzzer
Compare QuicDraw baseline GET vs concurrent HTTP/3 race traffic, then correlate race evidence you can retest.
- Vulnerability scanning
Coding Agent Policy Gate
Decide allow, alert, or block on coding-agent file, shell, and network actions with AgentsLeak rules and a GolemHalt Cedar/YARA corpus.
- Vulnerability scanning
OpenAPI IDOR & BOLA Scanner
Read a target's OpenAPI spec, enumerate every GET that takes an object id, and probe each with altered ids and stripped auth.
- Vulnerability scanning
Browser Extension Threat Scanner
Seed a Chrome MV3 zip into ThreatXtension, then correlate permission and threat findings you can retest.
- Vulnerability scanning
Find SSRF in HTTP Parameters
Crawl a target and mine its archived URLs, then test every parameter that takes a URL for server-side request forgery using out-of-band detection.
- Vulnerability scanning
Find Reflected XSS on a Domain
Collect a domain's archived URLs, keep parameters that reflect input, and fuzz each one for reflected and DOM cross-site scripting.
- Vulnerability scanning
ASN-Wide Vulnerability Scan
Turn an ASN into its live hosts, then scan the raw ports and the web surface for CVEs, misconfigurations, and exposures. Findings land in one report.
- Vulnerability scanning
Find Exposed Databases
Port-scan a range for eight database engines and check every open service for unauthenticated access, from MongoDB and Redis to PostgreSQL.
- Vulnerability scanning
MCP Trust Boundary Suite
Inventory HoneyMCP ghost tools and MCParasite channels, then correlate MCP trust-boundary findings you can retest.
- Vulnerability scanning
Web AI Agent Audit
Probe embedded web chat agents for injection, prompt leak, jailbreak, and role confusion with WebAgentAudit.
- Vulnerability scanning
Find Subdomain Takeovers
Find dangling CNAMEs an attacker could claim on your subdomains, with the service behind each record named so you know who to ask.
- Vulnerability scanning
Find Open Redirects on a Domain
Mine a domain's archived URLs for redirect parameters, then confirm which ones send a browser to an attacker-controlled host.