3,748 tools found
Validate server-side request candidates with attributed callbacks, negative controls, and a clear distinction between blind and full-read impact.
Assess SQL and MongoDB injection candidates with query-context checks, paired controls, bounded tests, and minimum necessary evidence.
Assess Spring Boot exposure through Actuator, H2, SpEL, and version-specific checks with bounded evidence and explicit authorization.
Map SPA backend candidates from approved bundles and verify route-level access controls with safe reads, owned fixtures, and gated controls.
Assess SharePoint exposure through edition and update evidence, scoped endpoint controls, and verified impact rather than markup or timing alone.
Find shadow and zombie API candidates, then compare old and current operations for verified security regressions within authorized scope.
Assess session lifecycle, fixation, refresh-token replay, and device binding with real owned-account flows and protected-resource controls.
Assess SAML signature validation, identity parsing, and federation boundaries using synthetic accounts and demonstrated authorization impact.
Assess server execution boundaries with request fidelity, controlled canaries, verified prerequisites, and minimal authorized evidence.
Assess vector-store isolation, retrieval poisoning, and metadata leakage with owned tenants, synthetic canaries, and verified boundary crossings.
Assess race conditions through bounded synchronized requests, state-machine analysis, and verification of committed effects on owned accounts.
Assess server and browser redirects, validate controlled navigation, and test authorized OAuth or SSRF chains with demonstrated impact.
