Advanced Bug Hunting Toolkit

Enter a domain to generate all oneliners commands

Subdomain Enumeration

Basic Subdomain Discovery

                
Live Subdomain Filtering

                
Subdomain Takeover Check

                

URLs

Fetch Archived URLs

                
Crawl URLs Fast

                
Param Miner

                

Sensitive Data

Git Secrets Scan

                
S3 Bucket Finder

                
Search Pastebin

                

Cross‑Site Scripting (XSS)

Passive XSS Dorking

                
Active XSS Hunt

                
Reflected XSS Probe

                

Local File Inclusion (LFI)

LFI Fuzz

                
LFI Payload Search

                
Detect PHP Wrappers

                

CORS Misconfiguration

CORS Scanner

                
CORS Exploit PoC

                
Check Wildcard CORS

                

WordPress

WPScan Enumeration

                
Bruteforce WP Login

                
Detect Vulnerable Plugins

                

Bruteforce

Hydra SSH Bruteforce

                
FTP Bruteforce

                
HTTP Login Bruteforce