deep-eye

Why we included this project

Penetration testers who work through web applications day after day will find Deep Eye a practical bridge between LLM API keys and a structured security workflow. It rotates among providers like OpenAI, Claude, Gemini, and local options such as OLLAMA, then builds context-aware payloads from the target's detected tech stack, with WAF and database fingerprinting steering the attacks. The scanner covers 45+ vulnerability types, from SQLi and XSS to JWT and OAuth flaws, and pulls real exploit patterns from a RAG-indexed CVE database fed by NVD, MITRE, and Exploit-DB. Reports go beyond raw findings by mapping results to PCI-DSS, SOC 2, and ISO 27001 controls, with exports in HTML, PDF, JSON, or JUnit XML, which suits both bug bounty triage and formal audit paperwork. Add YAML templates, Playwright-driven browser checks, an intercepting proxy, and Cloudflare/Akamai challenge bypass, and.