WonderSuite
A desktop-native offensive security platform, built on Rust and Tauri, that combines Burp Suite-class web testing tooling with an autonomous AI agent driving the tools through a native MCP interface.
WonderSuite ships 91 purpose-built security tools reachable over JSON-RPC, a full man-in-the-middle proxy with TLS interception and Chrome fingerprint impersonation aimed at defeating bot-detection services such as Cloudflare, Akamai Bot Manager, DataDome and PerimeterX, a bundled recent Chrome build with a stealth extension and per-version isolation, and a pentest-grade browser interface with stable element references and blind-vulnerability detection integrated with its own out-of-band listener.
Automated scanning covers SQL injection, cross-site scripting, server-side template injection, local file inclusion, CRLF injection, open redirect, and blind command injection, SSRF and Log4Shell through the bundled listener. An AI agent can drive the whole toolchain end to end, for example opening the browser, walking through a registration form and inspecting the resulting traffic in the proxy, choosing its own sequence of tool calls rather than following a fixed script.