SuperPentest launch film — autonomous AI penetration testing for web apps, APIs and AI agents

> launch assessment
40+ tools
member tenant-south High
12app.get('/invoices/:id', (req,res)=>{
13  db.find(req.params.id)IDOR
14})
GET /api/invoices/4821 · as member
200 OK owner: tenant-south
control → 401 · no session
✓ reproduced · clean session
VERIFIED
High Medium Low
Thirty-five classes. Every run.
SQLiXSSIDOR / BOLASSRFCORSCSRFObject tamperingAuth & sessionBusiness logicOAuth / SSOSubdomain takeoverSupply chainTemplate injectionExposed secretsAPI / GraphQLgRPCToken forgeryKnown CVEsKubernetesExploit chainsCommand injectionResponse splittingWebSocketAccount takeoverBlind detectionAI / MCP
Recon. Hypothesis. Proof. Verified.
Super Pentest.
Autonomous. Verified. In scope.
← superpentest.com