{"tools":[{"id":"hash-identifier","version":"1.0.0","name":"Hash Identifier","description":"Recognize hash formats and understand ambiguous matches.","category":"Cracking & crypto","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["hash-identifier","text","cracking & crypto"],"available":true,"icon":"Fingerprint"},{"id":"checksum","version":"1.0.0","name":"Hash & Checksum","description":"Calculate MD5, SHA-1, SHA-256 and SHA-512 for text or files.","category":"Cracking & crypto","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["checksum","text","cracking & crypto"],"available":true,"icon":"Hash"},{"id":"password-analyzer","version":"1.0.0","name":"Password Analyzer","description":"Estimate strength and spot predictable password patterns.","category":"Cracking & crypto","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["password-analyzer","text","cracking & crypto"],"available":true,"icon":"KeyRound"},{"id":"transform-studio","version":"1.0.0","name":"Transform Studio","description":"Chain encoders, decoders and cryptographic operations.","category":"Cracking & crypto","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["transform-studio","text","cracking & crypto"],"available":true,"icon":"Waypoints"},{"id":"hash-audit","version":"1.0.0","name":"Offline Hash Audit","description":"Test your candidate list against a supplied hash.","category":"Cracking & crypto","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"job","capabilities":["hash-audit","text","cracking & crypto"],"available":true,"icon":"LockKeyhole"},{"id":"zip-recovery","version":"1.0.0","name":"ZIP Recovery","description":"Recover a password from your own encrypted ZIP using candidates.","category":"Cracking & crypto","runtime":"browser","riskClass":"passive","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"job","capabilities":["zip-recovery","file","cracking & crypto"],"available":true,"icon":"FileArchive"},{"id":"pdf-recovery","version":"1.0.0","name":"PDF Recovery","description":"Try supplied passwords on your own encrypted PDF, locally.","category":"Cracking & crypto","runtime":"browser","riskClass":"passive","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"job","capabilities":["pdf-recovery","file","cracking & crypto"],"available":true,"icon":"FileLock2"},{"id":"jwt-inspector","version":"1.0.0","name":"JWT Inspector","description":"Decode claims and inspect token metadata without trusting it.","category":"Web security","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["jwt-inspector","text","web security"],"available":true,"icon":"Braces"},{"id":"csp-analyzer","version":"1.0.0","name":"CSP Analyzer","description":"Inspect a pasted Content Security Policy and its directives.","category":"Web security","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["csp-analyzer","text","web security"],"available":true,"icon":"ShieldCheck"},{"id":"metadata","version":"1.0.0","name":"Metadata Inspector","description":"Identify file signatures, dimensions and content fingerprints.","category":"Forensics","runtime":"browser","riskClass":"passive","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["metadata","file","forensics"],"available":true,"icon":"FileSearch"},{"id":"pcap","version":"1.0.0","name":"PCAP Studio","description":"Explore packets, protocols, DNS queries and conversations.","category":"Forensics","runtime":"browser","riskClass":"passive","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["pcap","file","forensics"],"available":true,"icon":"Activity"},{"id":"yara","version":"1.0.0","name":"Literal Rule Scanner","description":"Match a documented subset of YARA literal-string rules.","category":"Forensics","runtime":"browser","riskClass":"passive","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["yara","file","forensics"],"available":true,"icon":"ScanSearch"},{"id":"certificate","version":"1.0.0","name":"Certificate Parser","description":"Inspect a PEM X.509 certificate and validity dates.","category":"Network","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["certificate","text","network"],"available":true,"icon":"BadgeCheck"},{"id":"secrets","version":"1.0.0","name":"Secret Scanner","description":"Find likely credentials in text or files with redacted evidence.","category":"Secure development","runtime":"browser","riskClass":"passive","inputs":["text"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":true,"resourceClass":"small","timeoutClass":"interactive","capabilities":["secrets","text","secure development"],"available":true,"icon":"ScanLine"},{"id":"dns","version":"1.0.0","name":"DNS Explorer","description":"Resolve public A, AAAA, MX, TXT, NS and CAA records.","category":"Network","runtime":"server","riskClass":"passive","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"small","timeoutClass":"interactive","capabilities":["dns","domain","network"],"available":true,"icon":"Globe"},{"id":"tls","version":"1.0.0","name":"TLS Inspector","description":"Inspect a public certificate, negotiated TLS protocol and cipher.","category":"Network","runtime":"server","riskClass":"passive","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"small","timeoutClass":"interactive","capabilities":["tls","domain","network"],"available":true,"icon":"ShieldCheck"},{"id":"http-audit","version":"1.0.0","name":"HTTP Security Audit","description":"Assess headers, cookies, CSP, CORS and redirects.","category":"Web security","runtime":"server","riskClass":"passive","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"small","timeoutClass":"interactive","capabilities":["http-audit","url","web security"],"available":true,"icon":"Radar"},{"id":"domain-report","version":"1.0.0","name":"Domain Assessment","description":"Combine DNS, TLS and HTTP configuration in one report.","category":"Network","runtime":"server","riskClass":"passive","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":false,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"small","timeoutClass":"interactive","capabilities":["domain-report","domain","network"],"available":true,"icon":"Workflow"},{"id":"nmap","version":"1.0.0","name":"Network Mapper","description":"Scoped host and service discovery using Nmap.","category":"Network","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["nmap","domain","network"],"available":false,"icon":"Network"},{"id":"rustscan","version":"1.0.0","name":"Fast Port Discovery","description":"Controlled port discovery using RustScan.","category":"Network","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["rustscan","domain","network"],"available":false,"icon":"RadioTower"},{"id":"sslyze","version":"1.0.0","name":"TLS Deep Audit","description":"Extended protocol and cipher assessment with SSLyze.","category":"Network","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["sslyze","domain","network"],"available":false,"icon":"ShieldCheck"},{"id":"zap","version":"1.0.0","name":"Web Security Scanner","description":"Passive and verified active OWASP ZAP assessment.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["zap","url","web security"],"available":false,"icon":"Radar"},{"id":"nuclei","version":"1.0.0","name":"Template Scanner","description":"Verified-target Nuclei template assessment.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["nuclei","url","web security"],"available":false,"icon":"ScanSearch"},{"id":"openvas","version":"1.0.0","name":"Vulnerability Center","description":"Infrastructure assessment through Greenbone.","category":"Network","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["openvas","domain","network"],"available":false,"icon":"ShieldAlert"},{"id":"auth-audit","version":"1.0.0","name":"Auth Audit Lab","description":"Authentication testing in controlled local labs.","category":"Cracking & crypto","runtime":"agent","riskClass":"lab-only","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"small","timeoutClass":"interactive","capabilities":["auth-audit","domain","cracking & crypto"],"available":false,"icon":"LockKeyhole"},{"id":"nikto","version":"1.0.0","name":"Web Server Audit","description":"Verified web-server assessment using Nikto.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["nikto","url","web security"],"available":false,"icon":"Server"},{"id":"discovery","version":"1.0.0","name":"Content Discovery","description":"Scope-limited directory discovery.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["discovery","url","web security"],"available":false,"icon":"FolderSearch"},{"id":"fuzzer","version":"1.0.0","name":"Request Fuzzer","description":"Controlled request fuzzing on verified targets.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["fuzzer","url","web security"],"available":false,"icon":"Waypoints"},{"id":"injection","version":"1.0.0","name":"Injection Lab","description":"SQL injection checks inside an approved lab.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["injection","url","web security"],"available":false,"icon":"Database"},{"id":"xss","version":"1.0.0","name":"XSS Audit","description":"Verified-target XSS assessment using Dalfox.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["xss","url","web security"],"available":false,"icon":"Code"},{"id":"wordpress","version":"1.0.0","name":"WordPress Audit","description":"WPScan integration subject to licensing.","category":"Web security","runtime":"worker","riskClass":"controlled-active","inputs":["url"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["wordpress","url","web security"],"available":false,"icon":"PanelsTopLeft"},{"id":"subdomains","version":"1.0.0","name":"Subdomain Explorer","description":"Passive asset discovery with Subfinder.","category":"Reconnaissance","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["subdomains","domain","reconnaissance"],"available":false,"icon":"GitBranch"},{"id":"amass","version":"1.0.0","name":"Attack Surface","description":"Correlate infrastructure with OWASP Amass.","category":"Reconnaissance","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["amass","domain","reconnaissance"],"available":false,"icon":"Network"},{"id":"harvester","version":"1.0.0","name":"Public Source Recon","description":"Domain intelligence with theHarvester.","category":"Reconnaissance","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["harvester","domain","reconnaissance"],"available":false,"icon":"Search"},{"id":"spiderfoot","version":"1.0.0","name":"Recon Automation","description":"Correlated OSINT through SpiderFoot.","category":"Reconnaissance","runtime":"worker","riskClass":"controlled-active","inputs":["domain"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":true,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["spiderfoot","domain","reconnaissance"],"available":false,"icon":"Workflow"},{"id":"sast","version":"1.0.0","name":"Code Security","description":"Static code assessment using Semgrep.","category":"Secure development","runtime":"worker","riskClass":"controlled-active","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["sast","file","secure development"],"available":false,"icon":"CodeXml"},{"id":"supply-chain","version":"1.0.0","name":"Supply Chain Scanner","description":"Dependency, image and IaC assessment using Trivy.","category":"Secure development","runtime":"worker","riskClass":"controlled-active","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["supply-chain","file","secure development"],"available":false,"icon":"Boxes"},{"id":"memory","version":"1.0.0","name":"Memory Analysis","description":"Memory forensics with Volatility 3.","category":"Forensics","runtime":"worker","riskClass":"controlled-active","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["memory","file","forensics"],"available":false,"icon":"Cpu"},{"id":"yara-x","version":"1.0.0","name":"YARA-X Studio","description":"Full rule execution using an isolated YARA-X engine.","category":"Forensics","runtime":"worker","riskClass":"controlled-active","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"heavy","timeoutClass":"job","capabilities":["yara-x","file","forensics"],"available":false,"icon":"ScanSearch"},{"id":"wireless","version":"1.0.0","name":"Wireless Dashboard","description":"Observations from a paired local wireless agent.","category":"Network","runtime":"agent","riskClass":"lab-only","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"small","timeoutClass":"interactive","capabilities":["wireless","file","network"],"available":false,"icon":"Wifi"},{"id":"capture","version":"1.0.0","name":"Live Packet Capture","description":"Local packet capture through a paired agent.","category":"Forensics","runtime":"agent","riskClass":"lab-only","inputs":["file"],"outputs":["ToolResult","findings","json"],"requiresAuthentication":true,"requiresVerifiedTarget":false,"supportsAnonymousLocalMode":false,"resourceClass":"small","timeoutClass":"interactive","capabilities":["capture","file","forensics"],"available":false,"icon":"Activity"}],"version":"1"}