Security Tools
For Professionals

Discover hidden subdomains and expanding your attack surface is the first step in any security assessment. Our Subdomain Finder aggregates data from multiple passive sources including certificate transparency logs, search engines, and historical DNS records to find assets that others miss.

Don't test just what is visible today. The URL Finder digs through internet archives and historical crawls to find forgotten endpoints, backup files, and development parameters that developers thought were gone forever.

Modern web applications leak massive amounts of information in client-side JavaScript. JS Recon analyzes these files to extract hardcoded API keys, hidden endpoints, AWS credentials, and PII that developers accidentally committed.

// rasec js-scan results
// Target: https://app.example.com/main.bundle.js

[
  {
    "type": "API Key",
    "value": "api_key_example",
    "line": 1452,
    "confidence": "High"
  },
  {
    "type": "Endpoint",
    "value": "/api/v1/admin/users",
    "line": 402,
    "method": "DELETE"
  },
  {
    "type": "AWS Credential",
    "value": "AKIA...",
    "line": 89,
    "confidence": "Medium"
  }
]

Our flagship Dynamic Application Security Testing (DAST) scanner. It doesn't just fuzz blindly—it understands application logic. Using AI, it navigates your application, identifies complex state-dependent vulnerabilities, and validates findings to ensure zero false positives.

Secure your code before it ships. Our Static Application Security Testing (SAST) tool analyzes source code to identify insecure patterns, hardcoded secrets, and logic flaws without executing the application.

def login(username, password):
    # [CRITICAL] SQL Injection detected
    # User input is directly concatenated into query
    query = "SELECT * FROM users WHERE user = '" + username + "'"
    
    # Recommendation: Use parameterized queries
    # cursor.execute("SELECT * FROM users WHERE user = %s", (username,))
    
    db.execute(query)
    
    # [HIGH] Hardcoded Secret
    # Never commit secrets to version control
    api_key = "example_api_key_1234567890"

Missing security headers leaves users vulnerable to XSS, clickjacking, and other client-side attacks. This tool analyzes your server response headers and provides a grade along with actionable recommendations to implement HSTS, CSP, and more.

Stop using generic payload lists that are blocked by every WAF. Payload Forge generates custom, context-aware payloads with specific encoding and obfuscation techniques designed to bypass security filters.

Server-Side Template Injection is a critical vulnerability often leading to RCE. SSTI Forge generates engine-specific payloads to detect and exploit template engines across Python, Java, PHP, and Ruby stacks.

Detect invisible vulnerabilities. OOB Helper generates payloads designed to trigger out-of-band network interactions (DNS/HTTP), allowing you to detect Blind XSS, Blind SQLi, and SSRF where no response is returned to the user.

DOM-based XSS is invisible to server-side scanners. This tool analyzes client-side JavaScript to identify dangerous data flows from user inputs (sources) to execution functions (sinks) like innerHTML or eval.

// Source: location.hash
// Sink: innerHTML

function trackUser() {
    // [Danger] Direct flow from URL hash to HTML
    var unsafe = decodeURIComponent(window.location.hash);
    
    // Sink
    document.getElementById('welcome').innerHTML = unsafe;
}

// Exploit Vector:
// https://site.com#<img src=x onerror=alert(1)>

JSON Web Tokens are the standard for modern auth, but implementation flaws are common. Analyze your tokens for weak signatures, algorithm confusion ("none" algo), and information leakage.

{
  "header": {
    "alg": "HS256",
    "typ": "JWT"
  },
  "payload": {
    "sub": "1234567890",
    "name": "John Doe",
    "admin": false,
    "iat": 1516239022
  },
  "analysis": [
    {
      "severity": "High",
      "issue": "Weak Secret",
      "desc": "Signature verified with common secret 'secret123'"
    },
    {
      "severity": "Critical",
      "issue": "None Algo",
      "desc": "Token accepted with 'alg': 'none'"
    }
  ]
}

File upload features are high-risk entry points. This tool generates test files designed to bypass extension filters, magic byte checks, and MIME type validation to test for RCE via upload.

You have a shell, now what? PrivEsc Pathfinder provides a curated checklist of commands and techniques to enumerate the system, find misconfigurations, and elevate from a low-level user to root/admin.

Stuck on a vulnerability? Ask our AI Security Assistant. Trained on thousands of security reports and methodologies, it can explain complex concepts, suggest attack vectors, and help write remediation reports.

**User:** How do I fix the SQL injection in my login?

**RaSEC AI:** 
The vulnerability exists because user input is concatenated directly into the SQL string.

**Remediation:**
Use parameterized queries (Prepared Statements). This ensures the database treats user input as data, not executable code.

```python
# VULNERABLE:
# query = "SELECT * FROM users WHERE user = '" + username + "'"

# SECURE:
cursor.execute("SELECT * FROM users WHERE user = %s", (username,))
```

Would you like me to scan your codebase for other instances of this pattern?