- Injection vulnerability detection: Supports SQL injection detection of query parameters, POST and cookies, and HTTP header injection CRLF vulnerability detection.
- Cross-site vulnerability detection: Supports XSS, CSRF and SSRF vulnerability detection.
- Other risk detection: including but not limited to directory traversal vulnerabilities, arbitrary jump vulnerabilities, information leakage, improper security configuration, and vulnerabilities of enterprise open-source framework such as Struts and Wordpress. Diverse network access.