PULSAR

recon & zero-day console

Authentication

Change Password

First login — set a strong, unique password.

Two-Factor Authentication

Mandatory. Scan the QR with your authenticator app.

TOTP QR
Secret

PULSAR

Full Recon Scan

Runs origin discovery, subdomains, WAF, fingerprint, vuln scan and ports in one pass.

Recent Scans

Origin Finder

Find the real server IP behind Cloudflare / Datadome / Castle / Akamai.

Port Scanner

Async TCP scan with service detection + banner grab.

Subdomain Enumeration

Passive (crt.sh) + active wordlist brute.

WAF / Protection Detection

Identify Cloudflare, Datadome, Castle, Akamai, Imperva and more.

Technology Fingerprint

Server, framework, JS libs, CMS, panel detection.

Vulnerability Scan

Security headers, exposed paths, TLS summary, misconfig detection.

Active Fuzzing

Discovers parameters/forms and tests for SQLi, XSS, LFI, command injection, SSTI, open redirect.

Endpoint Discovery & Source Analysis

Maps attack surface (links, forms, JS endpoints, API paths) and scans source for leaked secrets.

Zero-Day & Vulnerability Research

Aggregated from CISA KEV, NVD, GitHub Advisories, Exploit-DB, Packet Storm.

Stealth & Anonymity

Route scans through proxies, rotate identity, hide your egress. Everything stays encrypted at rest.

Stealth Mode

Enabled
Rotate User-Agent

Proxy Pool