JSPM

Security report generation plugin for Vulcn — produces HTML dashboards, JSON, YAML, and SARIF v2.1.0 reports for GitHub Code Scanning and CI/CD integration.

Security payload loader plugin for Vulcn — curated XSS, SQLi, and injection attack payloads with built-in libraries, PayloadBox integration, and custom payload file support.

Fast, modern security testing engine — record browser sessions, replay with attack payloads, and detect vulnerabilities automatically. Pluggable driver and detection system for web application penetration testing.

Modern, fast penetration testing CLI — record browser interactions once, replay with security payloads, and find vulnerabilities like XSS and SQLi automatically. A lightweight, pluggable alternative to legacy security scanners.

Execution-based XSS detection plugin for Vulcn — detects real JavaScript execution (alert, confirm, console) rather than pattern matching, for accurate cross-site scripting vulnerability identification.

Playwright-based browser driver for Vulcn — record and replay web application interactions for automated security testing and vulnerability scanning.

Input reflection detection plugin for Vulcn — identifies when attack payloads appear unescaped in HTTP responses, catching output encoding failures and potential injection points.

Passive security scanner for Vulcn — detects missing security headers, insecure cookies, information disclosure, CORS misconfigurations, and mixed content without injecting payloads.

SQL injection detection plugin for Vulcn — detects error-based, timing-based, and UNION-based SQL injection vulnerabilities across MySQL, PostgreSQL, Oracle, SQLite, and MSSQL.