Vulnerability Discovery

Check Exposed .git Directory

Detect exposed .git directories on web servers that may leak source code, credentials, and project history via misconfigured web root deployments.

Command Injection Detection

Detect command injection vulnerabilities in HTTP/HTTPS services by identifying unsanitized input points that allow OS command execution on the target server.

CORS Misconfiguration Testing

Techniques for identifying CORS misconfigurations by probing Origin validation, wildcard usage, and credential exposure in cross-origin HTTP responses.

File inclusion

Discover Local and Remote File Inclusion vulnerabilities in web apps by testing path traversal, null bytes, and URL-based payloads via HTTP parameters.

HTTP Request Smuggling Detection

IDOR Testing by Parameter Tampering

JWT Vulnerability Testing

Web Misconfiguration Scan

Open Redirect Testing

Reflected XSS Checks

Source Map Exposure

Identifies exposed JavaScript source maps via .map files, revealing original source code, file structure, and comments unintended for production.

SQL Injection Detection

SSRF Detection

SSTI Detection

Stored XSS Checks

WebDAV Enumeration and Vulnerability Testing

XXE DTD Processing Checks