Z Tester v3.0

Advanced Security Testing Suite — WAF Testing, HTTP Debugging, Recon & More

20+
Attack Types
150+
Payloads
15+
Tools
Power

QUICK START

  1. Enter your target URL in the Target URL field
  2. Select HTTP Methods to test (GET, POST, PUT, DELETE)
  3. Choose Attack Categories (SQL Injection, XSS, etc.)
  4. Click Start Check to begin testing

WAF Tester

Test your WAF against 150+ attack payloads across 20+ categories

HTTP Canary

Intercept, inspect & debug HTTP requests and responses in real-time

NEW

HTTP Debugger

Build custom requests, edit cookies, test WebSockets

NEW

Full Recon

DNS, WHOIS, SSL, subdomains, tech stack, WAF fingerprinting

Port Scanner

Scan common ports and detect running services

NEW

Encoder / Decoder

Base64, URL, HTML, Hex, JWT decode, Unicode & more

NEW

Hash Generator

MD5, SHA-1, SHA-256, SHA-512 hash generation & comparison

NEW

IP Geolocation

Lookup IP addresses and get geographic information

NEW

Security Headers

Audit CSP, HSTS, X-Frame-Options & more with scoring

Password Checker

Test password strength and get security recommendations

NEW

Subdomain Finder

Discover subdomains using multiple techniques

NEW

Web Crawler

Spider websites and discover links, forms & endpoints

NEW

WAF SECURITY TESTER

Select attack categories from the sidebar, choose HTTP methods, enter a target URL and click Start Check to begin testing your Web Application Firewall.

HTTP Request Builder

Web Crawler / Spider

WebSocket Tester

WebSocket log will appear here...

DNS Lookup

Port Scanner

Subdomain Finder

WHOIS Lookup

SSL/TLS Analyzer

Technology Detector

Encoder / Decoder

JWT Decoder

Regex Tester

Matches will appear here...

Hash Generator

Password Strength Checker

IP Geolocation

HTTP Status Codes Reference

User Agent Parser

Response Diff

Diff results will appear here...

Blocks

REQUEST
HTTP Request
PARSE
Parse LR (Left/Right)
Parse JSON
Parse Regex
Parse CSS Selector
Parse XPath
Parse Header
Parse Cookie
LOGIC
Key Check
If / Else
Loop Begin
Loop End
UTILITY
Set Variable
Replace
Substring
Concat
Math
Random
Hash
Encode / Decode
Timestamp
Delay
Log / Print
ADVANCED
JS Execute
Auto Token
String Operation
Base Convert
JSON Build
Assert
CAPTCHA
reCAPTCHA
hCaptcha
0 blocks
Saved Configs
Variables
No variables yet
Data:
Proxy:

Drag blocks from the palette or double-click to add

Blocks execute top to bottom in sequence

Select a block to edit its settings

Double-click or drag a block from the palette

Ready. Add blocks and click Run to start.
No headers yet.
No response body yet.
No JSON data.
Cookie Jar
No cookies yet.
All Variables
No variables yet.
Config Info
No config loaded.