Pipeline-based offensive security scanner: recon, web vuln testing (XSS/SQLi/IDOR/BAC) and post-exploitation. Python, no core deps.