Command Palette

Search for a command to run...

Tools & Notes

Manage your tool arsenal and integration settings.

Reconnaissance

Amass
Ready
Recon

Attack surface mapping and subdomain enumeration.

Quick Command:

amass enum -d target.com
Subfinder
Ready
Recon

Passive subdomain enumeration using curated sources.

Quick Command:

subfinder -d target.com
Assetfinder
Ready
Recon

Domain asset discovery made simple.

Quick Command:

assetfinder --subs-only target.com
Chaos
Ready
Recon

ProjectDiscovery's massive internet-wide asset database.

Quick Command:

chaos -d target.com -key $CHAOS_KEY
Naabu
Ready
Recon

High-speed port scanner.

Quick Command:

naabu -host target.com
httpx
Ready
Recon

HTTP probe for checking live hosts.

Quick Command:

httpx -l hosts.txt
Gowitness
Ready
Recon

Screenshot capture for recon.

Quick Command:

gowitness file -f urls.txt
Waybackurls
Ready
Recon

Fetch archived URLs.

Quick Command:

waybackurls target.com
Katana
Ready
Recon

Next-gen crawler from ProjectDiscovery.

Quick Command:

katana -u https://target.com
Hakrawler
Ready
Recon

Go-based fast web crawler.

Quick Command:

hakrawler -url https://target.com
ParamSpider
Ready
Recon

Advanced parameter finder for endpoints.

Quick Command:

python3 paramspider.py --domain target.com
Gau
Ready
Recon

Fetch known URLs from AlienVault & Wayback.

Quick Command:

gau target.com
Gauplus
Ready
Recon

GAU with filtering and performance improvements.

Quick Command:

gauplus target.com
Findomain
Ready
Recon

Blazing fast subdomain enumeration.

Quick Command:

findomain -t target.com

Scanning

Nuclei
Ready
Scanner

Template-based vulnerability scanner.

Quick Command:

nuclei -u target.com
Nikto
Ready
Scanner

Classic web server scanner.

Quick Command:

nikto -host https://target.com
Wapiti
Ready
Scanner

Attack-based web vulnerability scanner.

Quick Command:

wapiti -u https://target.com
WhatWeb
Ready
Scanner

Website fingerprinting engine.

Quick Command:

whatweb target.com
Golismero
Ready
Scanner

Framework for scanning & recon automation.

Quick Command:

golismero scan target.com

Fuzzing

ffuf
Ready
Fuzzing

Fast web fuzzer.

Quick Command:

ffuf -u https://target.com/FUZZ -w wordlist.txt
Feroxbuster
Ready
Fuzzing

Recursive directory brute-forcing.

Quick Command:

feroxbuster -u https://target.com -w wordlist.txt
Dirsearch
Ready
Fuzzing

Path brute-forcer.

Quick Command:

dirsearch -u https://target.com -w paths.txt
Arjun
Ready
Fuzzing

Parameter discovery tool.

Quick Command:

arjun -u https://target.com
X8
Ready
Fuzzing

Parameter miner with smart mutation.

Quick Command:

x8 -u https://target.com

Exploitation

Metasploit Framework
Ready
Exploitation

Industry-standard exploitation suite.

Quick Command:

msfconsole
SQLMap
Ready
Exploitation

SQL Injection automation.

Quick Command:

sqlmap -u 'https://target.com/?id=1'
XSStrike
Ready
Exploitation

Advanced XSS scanner.

Quick Command:

xsstrike -u https://target.com
Xray
Ready
Exploitation

Web scanner & interceptor.

Quick Command:

./xray webscan --url https://target.com --html-output report.html
Dalfox
Ready
Exploitation

Powerful XSS & bypass scanner.

Quick Command:

dalfox url https://target.com
Commix
Ready
Exploitation

Automatic command injection tool.

Quick Command:

commix --url https://target.com
CORSy
Ready
Exploitation

Scan for CORS misconfigurations.

Quick Command:

python corsy.py -u https://target.com

OSINT

DNSX
Ready
Utility

Fast DNS resolver.

Quick Command:

dnsx -l subs.txt
MassDNS
Ready
Utility

High performance DNS resolver.

Quick Command:

massdns -r resolvers.txt -t A subs.txt
GHunt
Ready
OSINT

Google account OSINT framework.

Quick Command:

ghunt email target@gmail.com
theHarvester
Ready
OSINT

Passive OSINT footprinting.

Quick Command:

theHarvester -d target.com -b all
Sherlock
Ready
OSINT

Find usernames across social platforms.

Quick Command:

sherlock username
Holehe
Ready
OSINT

Check if email is linked to accounts.

Quick Command:

holehe email@gmail.com

Proxy

Burp Suite Professional
Connected
Proxy

Industry-standard proxy, scanner, and professional suite for web security testing.

Quick Command:

java -jar burpsuite_pro.jar
OWASP ZAP
Offline
Proxy

Open-source web application scanner and intercepting proxy.

Quick Command:

./zap.sh -daemon
Mitmproxy
Ready
Proxy

Interactive HTTPS proxy for debugging and testing HTTP traffic.

Quick Command:

mitmproxy
Reqable
Ready
Proxy

Modern API debugging proxy supporting HTTP(S), WebSocket, gRPC.

Quick Command:

reqable