Capabilities

Every capability below is implemented in the platform. No fabricated functionality.

Project Doctor

Full diagnostic pipeline. Runs Deploy, API, Security, SSL, Mapper, Refactor, AI.

🩺

Project Doctor

Automated tool — Project Doctor

Cloning

Copy a complete website into a ZIP.

➕

New Clone Job

Enter a URL and configuration; the crawler downloads pages, assets, and produces a ZIP.

📋

Jobs

List of all clone jobs with progress, logs, ZIP download, pause/resume, delete.

⚡

Pro Cloner

Automated tool — Pro Cloner

Recon

Fingerprint website technology, DNS, TLS.

🔍

Detect Site Technology

Detects CMS, framework, language, server, database, and tech stack by inspecting HTML/headers.

🛡

Admin Panel Finder

Probes 200+ known admin, login, and dashboard paths to detect exposed panels.

🌐

DNS Intelligence

Queries A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, DMARC, SPF records.

🔐

SSL/TLS Inspector

Certificate chain, SAN subdomains, expiry, TLS versions, cipher suites, HSTS.

Extraction

Extract emails, SMTP config, communication tokens.

📧

SMTP & Mail Config

Extracts SMTP hosts, ports, credentials, mail API keys (SendGrid, Mailgun, etc.).

📧

Email Extractor

Extracts all email addresses from a site (mailto:, text, JSON-LD, obfuscated).

📡

Telegram & Chat APIs

Scans JS/HTML for Telegram bot tokens, chat IDs, Discord/Slack webhooks, WhatsApp numbers.

Secrets

Extract secrets and config files.

🔐

JS Secrets

Deep-scans JavaScript for API keys, tokens, secrets, credentials with reverse-engineering guide.

📄

ENV Files

Probes 100+ paths for exposed .env, wp-config, appsettings, .git/config, SSH keys.

🗄

Database Tables

Enumerates database tables via Supabase REST, WordPress REST, GraphQL introspection.

Cloud

Analyze Supabase, Firebase, cloud buckets.

⚡

Supabase Analyzer

Detects Supabase projects, anon/service keys, RLS status, exposed tables.

🔥

Firebase Analyzer

Extracts Firebase config, tests Firestore/RTDB/Storage rules.

☁️

Cloud Bucket Auditor

Finds S3, GCS, Azure Blob references and tests public access.

Frontend

Frontend security and detection.

🧠

JS Analyzer

Downloads all JS files, scans for secrets, endpoints, and hosts.

📱

PWA Detector

Detects manifest.json, service workers, offline support, install prompt.

💬

Live Chat Detector

Detects Intercom, Crisp, Drift, Tawk, LiveChat, Zendesk, HubSpot, etc.

🔑

Password Storage Detector

Detects passwords in localStorage, sessionStorage, cookies, or hardcoded in JS.

Defensive

HTTP security headers, cookies, XSS/CSRF.

📋

Security Headers

Audits HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy.

🍪

Cookie Inspector

Inspects Set-Cookie flags: Secure, HttpOnly, SameSite, expiry, domain.

🛡

XSS/CSRF Scanner

Reads HTML forms for missing CSRF tokens and unsafe patterns (passive only).

🌐

CORS Detector

Tests CORS with forged Origin headers (subdomain, null, arbitrary).

🔑

Default Creds

Tests 12 well-known default username/password pairs on admin panels.

Security

Deep security auditing.

🐘

PHP Audit

Detects PHP version, exposed phpinfo, config leaks, debug logs, vendor files.

📊

Risk Score

Runs SSL + Admin + ENV + Buckets + Supabase + Firebase + Secrets in one scan.

🩺

System

Shows server environment: PHP version, extensions, writable dirs, disk space.

Workflow

Verification, exports, reports.

✅

Ownership Verifier

Prove you own a domain via DNS TXT record or file upload. Required for privileged tools.

📤

Export

Exports findings as Burp Suite JSON, OWASP ZAP JSON, or Nmap XML.

📄

Report Generator

Produces professional HTML report from latest Risk Score scan.

Crypto

Ethereum, ERC-20, DeFi, contracts.

💰

Multi-Chain Wallet Lookup

Wallet balance + tx data across BTC/ETH/BSC/Polygon.

📜

Wallet TX History

List of recent transactions.

⚖️

Multi-Chain Balance

Balance across BTC/ETH/BSC/Polygon at once.

🪙

Token Holdings

ERC-20/BEP-20 tokens held.

🖼

NFT Holdings

NFTs owned by address.

📄

Smart Contract Reader

Read verified contract source + ABI.

⛽

Gas Tracker

Current ETH gas prices.

💵

Coin Price Lookup

Price in USD/EUR/GBP.

🚩

Sanctioned Address Check

Cross-reference address against OFAC SDN.

🐛

Scam Token Scanner

Checks token against scam databases.

🍯

Honeypot Detector

Can the token be sold?

📉

Rug Pull Detector

Check LP locks, owner concentration.

🛡

Token Security Score

Aggregated security grade.

🎣

Phishing Domain Detector

Cross-check against OpenPhish + MetaMask blacklist.

💧

Wallet Drainer Detector

Scan URL for drainer JS signatures.

✅

Approval Checker

List wallet token approvals.

🐋

Token Holder Distribution

Top holders + concentration.

💧

Liquidity Check

Total USD liquidity across DEX pools.

🔄

DEX Pair Lookup

All DEX pairs for a token.

🏦

DeFi Positions

Aave/Compound positions.

📊

TVL Tracker

Total Value Locked.

🔐

LP Lock Check

Is liquidity locked?

⚡

Arbitrage Scanner

Compare prices across DEXes.

🌾

Yield Farm Scanner

Top farms by APY.

📖

Contract Source Extractor

Fetch verified source code.

📜

ABI Extractor

Get contract ABI.

🔍

Function Signature Lookup

Look up 4-byte selectors.

⚙️

Bytecode Analyzer

Get bytecode + patterns.

🔄

Proxy Detector

Detect upgradeable proxies.

🎯

Proxy Implementation Lookup

Find implementation address.

📊

Event Log Reader

Read recent events.

🧬

Bytecode Decompiler

Extract function selectors.

💸

Money Flow Tracker

Trace funds in/out.

🌀

Mixer Detector

Detect Tornado Cash interactions.

🌉

Bridge Tracker

Track cross-chain bridges.

💼

Cross-Chain Portfolio

Aggregate balance + USD.

🐦

Twitter Search

Search Twitter via Nitter.

💬

Telegram Groups

Find public Telegram groups.

👽

Reddit Search

Search crypto subreddits.

📺

YouTube Search

Search YouTube crypto videos.

Mixers

Tornado Cash + mixer intelligence.

🌀

Tornado Cash Analyzer

Analyze deposits/withdrawals.

💧

Mixer Pool Analyzer

TVL per pool.

🔗

Mixer Interaction Graph

Map all mixer interactions.

🔍

Similar Mixer Finder

Find similar mixers.

📊

Mixer Flow Timeline

Chronological deposits/withdrawals.

🧮

Anonymity Score

Compute anonymity set size.

🕵️

Mixer Correlator

Timing analysis for correlation.

⚠️

Mixer Risk Score

Rate wallet risk.

🎯

Tornado Cash Classic

List all Tornado pools.

🌐

Cross-Chain Mixers

List all known mixers.

📜

Mixer Contract Reader

Read mixer contract.

🔬

Mixer Event Log Analyzer

Parse deposit/withdrawal events.

Solana

Solana wallets, SPL tokens, NFTs, programs.

💰

Solana Wallet

SOL balance + account info.

📜

Solana TX History

Recent transaction signatures.

🪙

SPL Token Holdings

All SPL tokens held.

🖼

Solana NFTs

NFTs owned.

🏦

Solana Staking

Native + liquid staking.

📊

SPL Token Info

Name, symbol, supply.

🐋

Solana Token Holders

Top holders.

💧

Solana DEX Liquidity

Liquidity across DEXes.

🔄

Jupiter Swap Route

Best swap route.

💵

Solana Token Price

Current price.

📖

Program Info

Program account details.

📜

Program IDL

Anchor IDL.

🔑

Program Accounts

Enumerate accounts.

🧮

PDA Derivation

Compute PDA.

🔬

Instruction Decoder

Parse instructions.

🍯

Solana Honeypot

Can token be sold?

📉

Solana Rug Check

Risk score.

🎣

Solana Phishing

Phishing check.

🌀

Solana Mixer Detector

Detect privacy protocols.

⚠️

Solana Risk Score

Aggregate risk.

Bitcoin

Bitcoin addresses, UTXOs, transactions, privacy.

💰

BTC Address Lookup

Balance, received/sent, tx count.

📜

BTC Address Transactions

Full tx history.

🧮

UTXO Analyzer

All unspent outputs.

📊

Address Type Detector

Type detection.

🔗

Address Cluster

Common-input heuristic.

🔍

TX Lookup

Full tx details.

💵

Fee Analyzer

Fee rate, vsize, weight.

📝

Script Decoder

Decode script.

🔄

I/O Mapper

Map inputs to UTXOs.

⚡

RBF/CPFP Detector

Detect replace-by-fee.

📦

Block Lookup

Block info.

🎯

Mempool Explorer

Live mempool stats.

💸

Fee Estimator

Recommended fees.

⛏

Mining Pool Tracker

Recent blocks.

🔗

Reorg Detector

Chain reorgs.

🔓

Address Reuse Detector

Reuse count.

🎯

Tainted Coin Tracker

Known-bad connections.

🌀

CoinJoin Detector

Detect CoinJoin txs.

⚠️

BTC Risk Score

Aggregate risk.

🐋

Whale Tracker

Large BTC movements.

White Hat

Defensive HTTP security, passive only.

🔍

Advanced Security Headers

Grade headers A-F.

🍪

Cookie Deep Inspector

Cookie flags audit.

🛡

CSP Analyzer

Parse CSP directives.

🔐

HSTS Preload Checker

Preload requirements.

⚠️

Mixed Content Detector

HTTP on HTTPS pages.

Phone Intelligence

Public phone number intelligence. No tracking, no interception.

📞

Phone Validate

Automated tool — Phone Validate

🚩

Phone Reputation

Automated tool — Phone Reputation

📊

Phone Intel

Automated tool — Phone Intel

Deep Web

Public deep web intelligence. Clearnet sources only.

📋

Paste Monitor

Automated tool — Paste Monitor

🔒

Ransomware Tracker

Automated tool — Ransomware Tracker

🧅

Onion Index

Automated tool — Onion Index

🎭

Threat Actor Watch

Automated tool — Threat Actor Watch

Network Forensics

Pure-PHP network analysis — PCAP, NetFlow, JA3, DNS, beacons.

📦

PCAP Analyzer

Automated tool — PCAP Analyzer

📊

NetFlow Analyzer

Automated tool — NetFlow Analyzer

🔐

JA3 Fingerprint

Automated tool — JA3 Fingerprint

🕳

DNS Tunnel Detector

Automated tool — DNS Tunnel Detector

📡

Beacon Detector

Automated tool — Beacon Detector

Mobile Intel

Android APK and iOS IPA static analysis.

🤖

APK Analyzer

Automated tool — APK Analyzer

📱

IPA Analyzer

Automated tool — IPA Analyzer

🏪

Store Lookup

Automated tool — Store Lookup

🔬

SDK Fingerprint

Automated tool — SDK Fingerprint

Developer Tools

PHP debugging, static analysis, testing, profiling, deployment.

🧠

AI Code Doctor

Automated tool — AI Code Doctor

🐛

PHP Error Doctor

Automated tool — PHP Error Doctor

🔄

Refactor Engine

Automated tool — Refactor Engine

🗄

SQL Doctor

Automated tool — SQL Doctor

🌐

API Doctor

Automated tool — API Doctor

📦

Dependency Doctor

Automated tool — Dependency Doctor

🔥

Log Intelligence

Automated tool — Log Intelligence

🚀

Deploy Doctor

Automated tool — Deploy Doctor

🧩

Project Mapper

Automated tool — Project Mapper

🔬

Static Analyzer

Automated tool — Static Analyzer

🧪

Test Generator

Automated tool — Test Generator

⚡

PHP Profiler

Automated tool — PHP Profiler

🧵

Xdebug Console

Automated tool — Xdebug Console

Email Intelligence

Email validation, breach check, header analysis, domain profiling, pattern generation, disposable detection.

📧

Email Verifier

Automated tool — Email Verifier

🔍

Email Breach

Automated tool — Email Breach

📨

Email Headers

Automated tool — Email Headers

🏢

Email Domain

Automated tool — Email Domain

🎯

Email Patterns

Automated tool — Email Patterns

💧

Disposable Email

Automated tool — Disposable Email

People Search

Public-source name, username, and identity correlation. No private data.

👥

Name Search

Automated tool — Name Search

📱

Phone Links

Automated tool — Phone Links

🕸

Identity Graph

Automated tool — Identity Graph

🔤

Username Variants

Automated tool — Username Variants

🏛

Reverse WHOIS

Automated tool — Reverse WHOIS

CT & Subdomain Intel

Certificate Transparency logs, wildcard certs, origin IP discovery, subdomain takeover detection.

📜

CT Stream

Automated tool — CT Stream

🔒

Wildcard Certs

Automated tool — Wildcard Certs

🌐

Origin IP

Automated tool — Origin IP

⚠

Subdomain Takeover

Automated tool — Subdomain Takeover

Identity (Legal)

Format validation and educational reference only. No identity lookup — no API provides that without consent.

🔐

SSN Validator

Automated tool — SSN Validator

📋

SSN Area Ref

Automated tool — SSN Area Ref

OSINT Network

Network OSINT — WHOIS, DNS, IP, ASN.

📇

WHOIS

Domain registration.

🔎

DNS Lookup

All DNS records.

📍

IP Lookup

Geo + ASN.

🏢

ASN Lookup

ASN info.

↩

Reverse DNS

PTR lookup.

📧

MX Lookup

Mail servers.

📝

TXT Lookup

TXT records.

🗄

NS Lookup

Nameservers.

🔗

CNAME Lookup

CNAME chain.

🌳

Subdomain Finder

CT logs + brute.

📋

Domain Info

Combined lookup.

📅

Domain Age

Age of domain.

→

Domain to IP

Resolve.

←

IP to Domain

Reverse DNS.

OSINT Reputation

Domain, IP, URL reputation.

🏆

Domain Reputation

TLS + email posture.

🚩

IP Reputation

OTX threat intel.

⚠

URL Reputation

Threat feeds.

🔍

CT Search

CT subdomains.

🕰

DNS History

Historical DNS.

OSINT Web

Web OSINT.

📋

HTTP Headers

Response headers.

⚙

Tech Detector

Stack detection.

🏷

Metadata

Meta tags.

🤖

Robots.txt

Robots view.

🗺

Sitemap

Sitemap parse.

🔗

Link Extractor

All links.

OSINT Extract

Archive, IOC, hash ID.

📚

Web Archive

Historical snapshots.

🧬

IOC Extractor

Extract IOCs.

🔢

Hash Identifier

Identify hash type.

OSINT Threat

Threat intelligence.

🚨

Threat Intel

OTX + URLhaus.

☣

Malware Hash

MalwareBazaar check.

OSINT Search

Search platforms.

🐙

GitHub Search

Search users + repos.

👤

Username Check

19 platform availability.

✉

Email Domain

MX + provider.

🎯

Dork Generator

18 Google dorks.

📋

Paste Search

psbdmp.ws search.

☁

Public Assets

Cloud bucket finder.

🌐

Social Search

Username + GitHub.

OSINT Media

EXIF + PDF metadata.

📷

EXIF Viewer

EXIF + GPS.

📄

PDF Metadata

PDF info.

OSINT Workbench

Case management.

📁

Case Manager

Track investigations.

Investigation

Case management, evidence, chain of custody, email forensics.

📁

Case Manager

Automated tool — Case Manager

📎

Evidence

Automated tool — Evidence

📅

Timeline

Automated tool — Timeline

🔐

Evidence Hash

Automated tool — Evidence Hash

⛓

Chain of Custody

Automated tool — Chain of Custody

📧

Email Headers

Automated tool — Email Headers

✉

Email Reputation

Automated tool — Email Reputation

🧬

Email IOCs

Automated tool — Email IOCs