Overview
Security testing toolkit for web pages. Inspect headers, cookies, JWT tokens, request data, and run common reconnaissance checks.
Cyboware is a browser sidebar toolkit for bug bounty hunters, penetration testers, and security researchers; one workspace instead of fifteen tabs. It bundles recon and fingerprinting (tech stack profiler, security header audit, cookie inspector, subdomain enumeration via CT logs, DNS lookup, directory bruteforcer, WordPress scanner), page analysis (secret scanner with 33 regex patterns, endpoint extractor for REST/GraphQL/WebSocket, hidden element revealer, link harvester, JS beautifier), and active testing (request replayer with Copy as cURL, CORS tester, open redirect scanner, parameter fuzzer covering 9 vuln classes, 403 bypass tester, HTTP method tester, JWT editor, and a full encode/decode workbench). Smart features include passive vulnerability hints, CSP evaluator, subdomain takeover checker against 27 service fingerprints, IDOR detector, response diff, and Wayback snapshots. A proxy-history-style site map captures requests across tabs and aggregates by root domain, while Live Browse runs passive scans on every page load with deduplication and per-domain isolation. Workflow tools — scope manager, per-domain bug notes, browse history, screenshots, and a persistent scratchpad — keep findings organized. Everything runs locally in your browser. No accounts, no API keys, no telemetry. Open source. https://github.com/Cyboghostginx/cyboware
Details
- Version2.5.1
- UpdatedMay 5, 2026
- Offered byCyboghostginx
- Size128KiB
- LanguagesEnglish
- Developer
Email
vegatayo01@gmail.com - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
Cyboware has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.
Cyboware handles the following:
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
