Tools

Powerful browser'based security testing tools and APIs designed for security professionals and researchers.

Or, view our API documentation

API doc

Wordlists

Access curated security wordlists for penetration testing, bug bounty hunting, and reconnaissance

Expired Domain Checker

Check domain expiration dates to identify potential takeover opportunities

Subdomain Takeover

Identify subdomain takeover vulnerabilities by checking DNS records pointing to unclaimed services

Newtowner

IP-based whitelist bypass testing from various cloud providers like Cloudflare and AWS

Surf

Advanced SSRF detection tool that identifies unreachable hosts and potential SSRF candidates

Nowafpls

WAF bypass detection tool that tests various evasion techniques and payload obfuscation