Skip to content
@go-appsec

go-appsec

Application security tools written in Go. Built for pentesters, AppSec engineers, and coding agents.
README.md

Our modules focus on practical testing workflows — proxy interception, reconnaissance, out-of-band detection — designed to work standalone or together. The flagship project, toolbox, exposes these capabilities through both a CLI and an MCP server, so human operators and LLM agents can collaborate on the same session.

Repositories

go-appsec/toolbox — Collaborative application security testing between humans and agents via CLI and MCP. Proxy history, request replay, crawling, OAST, flow diffing, reflection detection — all accessible to your coding agent as MCP tools, or from the terminal as CLI commands. You handle auth and UI; the agent queries flows, mutates requests, and tests permutations.

go-appsec/interactsh-lite — Lightweight Interactsh client for out-of-band testing (OOB/OAST). Minimal dependencies, designed for embedding, but also distributed as a small CLI executable.

go-appsec/scout — Passive recon module to expand testing targets. Discovers subdomains and URLs to widen testing scope.

Pinned Loading

  1. toolbox toolbox Public

    Collaborative application security testing between humans and agents via CLI and MCP

    Go 10 3

  2. interactsh-lite interactsh-lite Public

    Lightweight rebuild of the Interactsh client from ProjectDiscovery for out-of-band testing (OOB / OAST)

    Go 1 2

  3. scout scout Public

    Passive recon golang module to expand testing targets (subdomains and urls)

    Go 1 1

Repositories

Showing 4 of 4 repositories
  • scout Public

    Passive recon golang module to expand testing targets (subdomains and urls)

    go-appsec/scout’s past year of commit activity
    Go 1 MIT 1 0 1 Updated Mar 12, 2026
  • toolbox Public

    Collaborative application security testing between humans and agents via CLI and MCP

    go-appsec/toolbox’s past year of commit activity
    Go 10 MIT 3 2 0 Updated Mar 9, 2026
  • interactsh-lite Public

    Lightweight rebuild of the Interactsh client from ProjectDiscovery for out-of-band testing (OOB / OAST)

    go-appsec/interactsh-lite’s past year of commit activity
    Go 1 MIT 2 0 0 Updated Feb 22, 2026
  • .github Public

    go-appsec organization .github

    go-appsec/.github’s past year of commit activity
    0 0 0 0 Updated Feb 17, 2026

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…