Everything you need, nothing you don't
Intercept
HTTP/1.1, HTTP/2, WebSocket interception with on-the-fly TLS. Full request/response modification. The core of the workflow.
Scan
22 active checks: SSRF, SQLi, SSTI, XSS, JWT, LDAP, BOLA, path traversal, and more. Blind detection via out-of-band callbacks.
Fuzz
Intruder with payload generators, processors, grep matching, and concurrent execution. Cluster bomb, pitchfork, sniper â all the modes.
Repeat
Edit any request, send it, read the response. No friction. Tabbed interface for parallel testing.
Analyze
Sequencer for token randomness. Decoder for every encoding. Comparer for response diffing. Sitemap for structure.
Automate
94 MCP tools. Connect your AI agent directly â Claude, Cursor, or anything MCP-compatible. No scraping, native integration.
Go further with Pro
5 EUR/month. No subscription. No auto-renewal. Pay when you need it.
Race Conditions
Single-packet, last-byte sync, barrier-based attacks. 60+ modules. The kind of bugs that pay well.
Synaps Modules
WASM-sandboxed community scanner modules. Install third-party checks with one command. Fuel-limited execution.
Lua Extensions
Modify live traffic with scripts. Hook requests, responses, scanner results. Your proxy, your rules.
Offensive MCP
40+ additional MCP tools for active exploitation. HTTP smuggling, deserialization, SSRF chains, and more.
No demo. No trial. No strings.
Download. Configure your proxy. Start hunting. The Community tier is the full tool â not a teaser.