🌶 Tools

Turn a domain or IP into instant pivot links across 25+ OSINT services — Shodan, Censys, VirusTotal, crt.sh and more.

Turn full names into the username and email formats orgs use (first.last, flast, f.last…), with a domain for emails. Copy or download. In-browser.

Compose advanced search-engine queries with a live preview and a preset gallery for OSINT and bug bounty.

Tick scan type, timing, NSE categories and output; watch the Nmap command assemble live, then copy it. Builder only — never scans.

Reverse/bind shell templates across common shells, with URL / Base64 / PowerShell encoders and listener helpers.

Chain reversible transforms — Base64, URL, hex, HTML entities, Unicode, ROT13 — into an encode/decode recipe for payload crafting and WAF-bypass research. In-browser.

Build Hashcat masks and rules, or John rules, with live sample preview and keyspace estimates. Builder only, no cracking.

Paste a hash to identify likely algorithms and get the matching Hashcat -m mode and John format. Offline, in-browser.

Decode a JSON Web Token's header, payload and claims and flag weak algorithms, expiry and common misconfigurations. No upload, no verification.

Draft a report with executive summary, scope, methodology and findings plus a CVSS 3.1 calculator. Export Markdown / HTML / PDF. Private by design — nothing stored or uploaded.

Fast engagement emails — kickoff, status, and especially incident/mistake, out-of-scope and deconfliction — exported as .eml, mailto, .txt, Markdown or copy.

Score a finding with the official CVSS v4.0 and v3.1 metrics — exact FIRST reference maths, live severity and vector string, paste-to-load. In-browser, nothing uploaded.

A client-side coverage checklist for authorized LLM / GenAI red teaming, organised by the OWASP Top 10 for LLM Applications (2025) and cross-referenced to MITRE ATLAS. Track status, filter by category and system type, export Markdown / JSON. Nothing uploaded.

Searchable reference of living-off-the-land binaries by abuse function, with MITRE ATT&CK cross-links.