Tool · activeactive
Corsy
Scans for CORS misconfigurations.
Use responsibly
Test only systems you own or are explicitly authorized to test. Unauthorized testing is illegal.
Tagsactive
More tools
- CommixactiveAutomated command-injection detection and exploitation.
- CRLFuzzactiveProbes for CRLF injection and HTTP response splitting.
- DalfoxactiveXSS scanner for reflected, stored and DOM input surfaces with structured PoC output.
- GhauriactiveFast automated SQL-injection detection and exploitation, an sqlmap alternative.
- gowitnessactiveHeadless screenshot capture of web targets.
- GraphQL CopactivePurpose-built GraphQL security audit for introspection, field suggestion, batching/DoS and CSRF issues.