Cyboware

Security testing toolkit for web pages. Inspect headers, cookies, JWT tokens, request data, and run common reconnaissance checks.

Cyboware is a browser sidebar toolkit for bug bounty hunters, penetration testers, and security researchers; one workspace instead of fifteen tabs. It bundles recon and fingerprinting (tech stack profiler, security header audit, cookie inspector, subdomain enumeration via CT logs, DNS lookup, directory bruteforcer, WordPress scanner), page analysis (secret scanner with 33 regex patterns, endpoint extractor for REST/GraphQL/WebSocket, hidden element revealer, link harvester, JS beautifier), and active testing (request replayer with Copy as cURL, CORS tester, open redirect scanner, parameter fuzzer covering 9 vuln classes, 403 bypass tester, HTTP method tester, JWT editor, and a full encode/decode workbench). Smart features include passive vulnerability hints, CSP evaluator, subdomain takeover checker against 27 service fingerprints, IDOR detector, response diff, and Wayback snapshots. A proxy-history-style site map captures requests across tabs and aggregates by root domain, while Live Browse runs passive scans on every page load with deduplication and per-domain isolation. Workflow tools — scope manager, per-domain bug notes, browse history, screenshots, and a persistent scratchpad — keep findings organized. Everything runs locally in your browser. No accounts, no API keys, no telemetry. Open source.