#appsec

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Multi-language taint and graph security scanner. Follows tainted data through your code and shows why each finding is a finding.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.