HackerGPT is an AI agent that pentests your own website, shows you what is exposed, explains how to fix it, and teaches you hacking while it does the work.
Give HackerGPT the URL of a site you own or have written permission to test.
AppMap shows the pages, logins and API endpoints it found.
Each finding comes with how to fix it and an explanation of how the attack works.
Test only sites you own or have written permission to test. To practice without one, use CyberGym.
Quick start guide and documentation for HackerGPT
Deliberately vulnerable apps set up for everyone to practice offensive security. Full permission is granted to perform hacking/intrusion/compromise of applications in scope.
Articles on offensive security, methodology and how HackerGPT works
What an IDOR is, shown on the real basket handler of CyberGym, a deliberately vulnerable training app, then reproduced and fixed in a small local Express app with two users.
What a CTF is, the main challenge categories, a small starter toolset, and a worked web challenge on CyberGym — plus how an AI can coach you through one without handing over the flag.
Security Researcher
Chief Legal Officer
Business Development and Outreach
Product Manager
Have questions or need assistance? We're here to help!