Execute an arbitrary shell command with sudo auto-escalation on permission errors.

High-speed asynchronous TCP port scan of a target or CIDR range.

Detailed port/service scan with version and script detection.

List network connections and listening sockets (falls back to 'ss').

Automated SQL injection detection and exploitation against a URL.

Scan a web server for known vulnerabilities and misconfigurations.

Fingerprint the web application firewall / security solution in front of a target.

Look up an internet-exposed host in Shodan (open ports, services, banners).

OSINT footprinting of a phone number (carrier, region, formatting).

Enumerate the attack surface of an AWS environment.

Parallelized network login brute-forcer across many protocols.

Crack password hashes with John the Ripper against a wordlist.

High-speed network authentication cracking.

Fast, parallel, modular network login brute-forcer.

Search the Exploit-DB archive for known exploits by keyword.

LAST RESORT: run a custom Python PoC in the isolated sandbox runner. Requires operator approval upstream.

Issue an HTTP request and return the verbose response.

Download a file or mirror content from a URL.

Write content to a file, escalating to sudo if the path is protected.

Read and return the contents of a file.

Brute-force web content, DNS, or vhosts against a wordlist.

Fast web fuzzer for directories, parameters, and vhosts.

Enumerate SMB/Samba shares, users, and policies on a host.

Drive the Social-Engineer Toolkit for a scripted attack scenario.

Passively enumerate subdomains of a domain.

Run community vulnerability templates against a target.

Crawl a web target and map its attack surface.

Probe hosts for live HTTP services (status, title, tech detection).

Hunt a username across social networks and public sites.