Skip to main content
Manual Attacks is the hands-on toolkit. It reads recon and, for each category, builds the in-scope target lists so every tool runs against the right hosts, services and URLs, and you decide what to run and when.
The Manual Attacks toolkit, organised by category

The Manual Attacks toolkit, organised by category

Categories include Web scanners, TLS, Takeover, injection, API and GraphQL, Redirect/CRLF/CORS and headers, CMS, Admin panels, Network and Cloud. Each tool’s command comes pre-filled with the targets recon found, so you can review, adjust and run. Findings flow back into Issues.