valITino

API security testing covering OWASP API Top 10 with active exploitation. Use when the user wants to test REST APIs, GraphQL endpoints, or API security.

Bug bounty hunting workflow with exploitation-driven PoC reports. Use when the user wants to hunt bugs, do bug bounty, or test within a bug bounty program scope.

Custom exploit development workflow — write, test, and iterate on exploit code for discovered vulnerabilities. Use when the user wants to develop custom exploits, write PoC code, adapt public exploits, or generate targeted payloads.

Full attack chain assessment from recon through exploitation with attack chain reporting. Use when the user wants maximum-impact testing, attack chain construction, or complete exploitation assessment.

Run a complete end-to-end penetration test with full exploitation and data extraction against a target. Use when the user wants a comprehensive pentest.

Comprehensive network infrastructure assessment with service exploitation and credential testing. Use when the user wants network-level pentesting, infrastructure assessment, or service enumeration.

Passive open-source intelligence collection against a target domain. Use when the user wants OSINT, passive recon, or intelligence gathering without active scanning.

Fast high-level security scan to quickly identify critical issues. Use when the user wants a quick triage or fast scan of a target.

Run a full 11-phase forensic investigation across all MCP servers — disk, memory, Windows artifacts, malware, network, OSINT, threat intel, timeline, and reporting.

Run a 6-phase forensic investigation — evidence intake, artifact collection, network analysis, threat intel, timeline reconstruction, and reporting.

Run a 7-phase incident response — triage, containment assessment, evidence collection, attack chain reconstruction, threat intel, impact assessment, and reporting.

Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

Investigate a domain — DNS/subdomain enumeration, infrastructure analysis, threat assessment, web presence mapping, and reporting.

Investigate a person via OSINT — username/email enumeration with Maigret/Sherlock/Holehe, infrastructure analysis, threat intel correlation, and digital footprint mapping.