What I am building

Automated subdomain enumeration, endpoint discovery, and URL collection. Takes a target domain and produces a structured map of its attack surface. Outputs clean, filtered results ready for manual review or automated scanning.

Targeted cross-site scripting detection tool. Injects test payloads into URL parameters and form fields, analyzes server responses for reflection, and logs confirmed or suspected findings with context.

Parses URLs from recon output, extracts query parameters, categorizes them by potential vulnerability type, and flags high-value targets. Useful for prioritizing manual testing after automated collection.

A web crawler that maintains authenticated sessions — handling login, cookies, CSRF tokens, and session refresh. Maps endpoints that are only visible behind authentication, where most real vulnerabilities live.

An intelligent fuzzer that adapts its payload set based on server responses. Supports encoding, obfuscation, and WAF-aware testing strategies. Generates report-ready output for each tested parameter.

Takes raw scan output and categorizes findings by severity, duplicate likelihood, and exploitability. Helps reduce noise from automated tools and surfaces the issues that actually matter for reporting.