Run subfinder to discover subdomains for a domain

Run httpx to check which hosts are live and get status codes

Run amass for passive/active subdomain enumeration

Resolve DNS records for a domain or subdomain

Run full reconnaissance workflow: subfinder -> httpx -> amass

Download JavaScript file from URL

Beautify and format JavaScript source code

Extract API endpoints, URLs, and paths from JavaScript code

Heuristically extract potential API keys, tokens, and secrets from JS

Download, beautify, and analyze a JavaScript file - extract endpoints and secrets

Test for XSS vulnerabilities (non-destructive payloads)

Test for SQL injection vulnerabilities

Test for IDOR (Insecure Direct Object Reference) vulnerabilities

Test Content Security Policy configuration

Test for authentication bypass vulnerabilities

Test for CSRF vulnerabilities using advanced techniques

Take a screenshot of a webpage

Extract and return the DOM structure of a webpage

Extract all forms from a webpage

Execute JavaScript in the context of a webpage

Save a bug finding to the database

Retrieve bug findings from the database

Retrieve test results with success/failure and scores

Get statistics about test results

Initialize database tables (run once on first setup)

Import training data from HTB or PortSwigger labs

Retrieve training data for learning patterns

Match current test against learned patterns

Get statistics about test results and training data

Import training data from PortSwigger Academy lab solution

Import training data from HackTheBox challenge

Import all pre-loaded training data from Intigriti, PortSwigger, and other sources

Extract training patterns from bug bounty writeup text

Get all CSRF exploitation patterns from training data

Check if ZAP is running and accessible

Start a spider (crawler) scan on a target URL

Get the status of a spider scan

Start an active vulnerability scan on a target URL

Get the status of an active scan

Get all security alerts from ZAP

Get summary of alerts by risk level

Send a custom HTTP request through ZAP proxy

Process a request through the MCP proxy layer (enhances with AI intelligence)

Get list of discovered sites from ZAP

Get list of discovered URLs from ZAP

Create a scanning context in ZAP

Include a URL pattern in a context