W

Web-Security

Pentest Toolkit for authorized security testing and analysis.

REST / GraphQL API Security Auditor for authorized security testing and analysis.

Load Balancing & Infrastructure Detector: Detect DNS LB, HTTP LB, CDN, WAF, TLS, GeoIP.

Cookie Security Analyzer & Session Auditor for authorized security testing and analysis.

Detect and confirm OS command injection via GET/POST/Header vectors. Echo-marker output extraction, time-based.

Authorised HTTP login-form credential testing. GET/POST/JSON , Failure & success detection , Response-length.

LFI Hunter for authorized security testing and analysis.

Multi-threaded web crawler — endpoint discovery, sitemap/robots parsing, header & tech fingerprinting, form.

Cockpit Web Console Configuration Auditor for authorized security testing and analysis.

Deep LFI/RFI/traversal detection. Built-in paths, expanded PHP wrappers, log poisoning, RFI module, confidence.

HTTP Parameter & Path Fuzzer for authorized security testing and analysis.

GlusterFS Configuration Hardening Auditor for authorized security testing and analysis.

Apache Guacamole Gateway Configuration Auditor for authorized security testing and analysis.

HAProxy Load-Balancer Configuration Auditor for authorized security testing and analysis.

Security Headers Auditor for authorized security testing and analysis.

Web-Server Configuration Auditor for authorized security testing and analysis.

Monitoring Configuration Hardening Auditor for authorized security testing and analysis.

Insecure Deserialization Auditor for authorized security testing and analysis.

BFS web crawling, JS rendering, link extraction, sitemap generation, login support, URL probing.

Squid Proxy Configuration Hardening Auditor for authorized security testing and analysis.