Full Recon Scan
Runs origin discovery, subdomains, WAF, fingerprint, vuln scan and ports in one pass.
Recent Scans
Origin Finder
Find the real server IP behind Cloudflare / Datadome / Castle / Akamai.
Port Scanner
Async TCP scan with service detection + banner grab.
Subdomain Enumeration
Passive (crt.sh) + active wordlist brute.
WAF / Protection Detection
Identify Cloudflare, Datadome, Castle, Akamai, Imperva and more.
Technology Fingerprint
Server, framework, JS libs, CMS, panel detection.
Vulnerability Scan
Security headers, exposed paths, TLS summary, misconfig detection.
Active Fuzzing
Discovers parameters/forms and tests for SQLi, XSS, LFI, command injection, SSTI, open redirect.
Endpoint Discovery & Source Analysis
Maps attack surface (links, forms, JS endpoints, API paths) and scans source for leaked secrets.
Auth Bypass Testing
Setup takeover, CSRF origin, method override, separate-auth-path discovery.
Enumeration & Rate-Limit
Timing/error-based user enumeration + throttle detection + bypass testing.
Zero-Day & Vulnerability Research
Aggregated from CISA KEV, NVD, GitHub Advisories, Exploit-DB, Packet Storm.
Stealth & Anonymity
Route scans through proxies, rotate identity, hide your egress. Everything stays encrypted at rest.