Real-evidence security scanner — every finding ships the raw HTTP/DNS evidence + a PoC curl command. Advanced mode fires real bypass attempts (SQLi login bypass, LFI, SSRF, takeover) plus a remote browser that hunts auth bypasses & DOM XSS. Only scan targets you are authorized to test.