Pynzor 1.0.6

Web pentesting CLI - scan ports, fuzz directories, hunt headers, and probe for vulns

██████╗ ██╗   ██╗███╗   ██╗███████╗ ██████╗ ██████╗
██╔══██╗╚██╗ ██╔╝████╗  ██║╚══███╔╝██╔═══██╗██╔══██╗
██████╔╝ ╚████╔╝ ██╔██╗ ██║  ███╔╝ ██║   ██║██████╔╝
██╔═══╝   ╚██╔╝  ██║╚██╗██║ ███╔╝  ██║   ██║██╔══██╗
██║        ██║   ██║ ╚████║███████╗╚██████╔╝██║  ██║
╚═╝        ╚═╝   ╚═╝  ╚═══╝╚══════╝ ╚═════╝ ╚═╝  ╚═╝

Web pentesting, sharpened.

Scan ports · Fuzz directories · Hunt headers · Probe for SQLi & XSS · Enumerate subdomains

Demo · Install · Usage · Commands · Download

---

Demo

Watch the demo on YouTube

---

Features

• One command, full scan — run every module against a target in a single invocation
• Modular architecture — each technique is an isolated Python module, easy to extend
• Rich terminal output — color-coded severity levels, live spinners, clean layout
• JSON & HTML reports — export results for sharing or archiving
• Async HTTP engine — httpx-powered parallel requests for speed
• Bundled wordlists — works out of the box, no setup required
• Fully tested — pytest test suite with async support

---

Install

pip (recommended)

pip install Pynzor

From source

git clone https://github.com/yal212/Pynzor.git
cd Pynzor
pip install -e .

uv

uv sync
uv run Pynzor --help

---

Download

No Python required — grab a prebuilt binary from GitHub Releases:

Platform	File	Run
Windows	Pynzor.exe	Pynzor.exe --help
macOS	Pynzor-macos	chmod +x Pynzor-macos && ./Pynzor-macos --help
Linux	Pynzor-linux	chmod +x Pynzor-linux && ./Pynzor-linux --help

macOS note: If blocked by Gatekeeper, run xattr -d com.apple.quarantine ./Pynzor-macos or allow it via System Settings → Privacy & Security.

---

Usage

Full scan with HTML report

Pynzor scan -t https://example.com -f html

Directory fuzzing

Pynzor fuzz -t https://example.com --wordlist ./mylist.txt --threads 30

Security header analysis

Pynzor headers -t https://example.com

Subdomain enumeration

Pynzor subdomain -t https://example.com

SQL injection probe

Pynzor sqli -t "https://example.com/item?id=1"

XSS detection

Pynzor xss -t https://example.com -v

---

Commands

Command	Description
scan	Full scan — run all modules
fuzz	Directory & file fuzzing
headers	Security header analysis
sqli	SQL injection probe
xss	Reflected XSS detection
subdomain	Subdomain enumeration
report	Re-generate report from JSON

---

Configuration

Source installs include a config.yaml for fine-tuning:

• HTTP timeout, retries, user-agent string
• Rate limiting and redirect behavior
• Output format and directory
• Port lists, wordlist paths, thread counts

---

Disclaimer

Pynzor is for authorized testing only. Only use it on systems you own or have explicit written permission to test. Unauthorized use is illegal and unethical.

---

MIT License — see LICENSE · Made by yal212