Scanners Custom Features Beautifiers and Decoders Cloud Security Scripting OAuth and SSO Information Gathering Vulnerability Specific Extensions Cross-site scripting Broken Access Control Cross-Site Request Forgery Deserialization Sensitive Data Exposure SQL/NoSQL Injection XXE Insecure File Uploads Directory Traversal Session Management CORS Misconfigurations Command Injection Type Confusion SSRF