A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.
🔎 In-band web application vulnerability scanner for developers: a reusable engine, a CLI, and an optional dashboard. Passive and production-safe by default; opt-in Active Mode for XSS, SQLi, SSRF, RCE, XXE, upload and more — every finding confirmed against a baseline.
