HydraSocket Console

TCP Client

Open a raw TCP connection and exchange data

Host

Port

Send (text, \r\n for CRLF)

UDP

Bind a local UDP socket and send/receive datagrams

Socket

Bind port (0 = random)

Bind address

IPv6

Send datagram

Destination host

Destination port

Data (text)

Received

Port Scan

Concurrent TCP-connect scan with banner grab and deep service probing

Target host

Port profile

Ports (e.g. 1-1024, 80,443, 8000-8100)

Timeout (ms)

Concurrency

Grab banner

Deep probe open ports

Show

Scheduled Scans

Save scan configurations and re-run them on a schedule. Results are compared to show new/closed ports.

Network Scan

Discover live hosts across a subnet and scan their open ports

Target range (CIDR or range)

Ports per host

Timeout (ms)

Concurrency

ICMP + ARP + MAC/vendor

UDP services

-Pn Skip discovery (scan all hosts)

-O OS detection

-A Aggressive (OS + versions)

⬡

Enter a CIDR range (e.g. 192.168.1.0/24) or IP range (e.g. 10.0.0.1-50) to discover hosts

Databases

Browse, query, and search SQLite, PostgreSQL, MySQL, SQL Server, MongoDB, Redis, and Elasticsearch / OpenSearch

Connections

No connections yet

Quick connect

Database

connected

Tables

Loading…

SQL

Query history

⊟

Select or create a connection to get started

Cloud Storage (S3)

Explore S3 and S3-compatible object storage (AWS, MinIO, Wasabi, Cloudflare R2, DigitalOcean Spaces)

Endpoint

Region

Access key ID

Secret access key

Session token (optional, for temporary credentials)

Path-style (needed for MinIO and most S3-compatible) Use HTTPS/TLS Trust self-signed certificate

S3

connected

Buckets

Service Explorer

Probe open ports to discover services, shares, versions, and capabilities

Target host

Ports (open ports from a scan, or type your own)

◈

Enter a host and ports, or use Scan + Probe to discover and inspect all open services

TLS / Certificate Inspector

Inspect the certificate chain, negotiated protocol and cipher, and which TLS versions a host accepts

Host

Port

SNI / server name (optional)

Summary

Protocol
Cipher
ALPN
Trust (system CAs)

TLS versions accepted

“not tested” means this host build can't speak that version, so the server's support is unknown.

Certificate chain

Raw HTTP Workbench

Arbitrary requests, fuzzing, chaining, comparison, auto-scan, WebSocket testing, encode/decode, cookie jar, auth helpers, and smuggling

Projects

URL (optional — Apply fills the fields and request line)

Host

Port

TLS

Follow redirects

Template

User-Agent

Raw request (exact bytes; LF shown, sent as CRLF)

History & saved requests

Mark injection points with §§ in the template. Each payload replaces the marker(s). For response body capture, enable Include body.

Host

Port

TLS

URL-encode

Include body

Concurrency

Grep/Match (regex to flag in results)

Request template (§§ marks the payload position)

Payload source

Payloads

Import an OpenAPI / Swagger spec (JSON or YAML) to auto-generate requests for every endpoint.

Spec URL (or paste below)

Method	Path	Summary

DNS Toolkit

Query any record type, reverse-resolve, target a specific server, and attempt zone transfers (AXFR)

Name / IP

Type

Server (optional — IP; required for AXFR)

Recon

Subdomain enumeration, security-header grading, and multicast LAN discovery

Domain

CT logs (crt.sh)

DNS brute

Start URL

Max pages

Max depth

Same origin

Pivot / Tunnel

A SOCKS5 proxy and static port-forwards so tools and browsers can reach networks only the host can — pivot through segmented networks (authorized only)

SOCKS5 proxy

Port

Bind address

Point a browser/tool's SOCKS5 proxy at this address. Outbound connections are made by the host.

Local port-forward (ssh -L style)

Local port

Remote host

Remote port

Active pivots

no active pivots

Connection log

Intercepting Proxy (MITM)

Decrypt HTTPS, capture/edit requests and responses, auto-modify with match-and-replace rules, capture WebSocket frames

Listen port

Bind address

Intercept requests

Intercept responses

Scope (comma-separated host substrings; empty = all)

Match & Replace

#	Method	Host	Path	Status	MIME	Length	Time

Listener / Netcat

Bind a local TCP or UDP port and capture whatever connects — test callbacks, egress rules, or run a tiny honeypot

Protocol

Bind port

Bind address

Capture

FTP Client

Browse and transfer files over FTP / FTPS

Host

Port

User

Password

TLS

Directory

Name	Size	Modified	Type

FTP Log

SSH Terminal

Remote shell via SSH — interactive command execution

Host

Port

User

Password / Key passphrase

SMB File Browser

Browse Windows network shares (SMB/CIFS)

Host

Share

User

Password

LDAP Browser

Query and browse LDAP / Active Directory trees

Host

Port

Bind DN

Password

TLS

SNMP Walker

Walk SNMP OID trees on network devices

Host

Port

Community

Version

OID

Max results

Results

OID	Type	Value

Findings Dashboard

Aggregated view of all discoveries — open ports, vulnerabilities, secrets, headers issues

Summary

0

Critical

0

High

0

Medium

0

Low

0

Info

Findings

Kill Chain / Attack Tree

Maps findings into MITRE ATT&CK kill chain phases — Recon → Initial Access → Execution → Persistence → Privilege Escalation → Lateral Movement → Exfiltration

Network Topology

Visual map of discovered hosts and their connections

Topology Map

Discovered Hosts

IP	Hostname	Open Ports	OS Guess	First Seen

Local Attack Surface

What's exposed and risky on this machine — listening ports with owning process, secret scan, file hashing, network config

Listening ports

Secret & sensitive-file scan

Directory to scan (absolute path)

File hash

File path

Network config

Host Log

Real-time log stream from the native host

Auto-scroll

Configuration

Current host configuration (read from the native host on connect)

⚙

Connect to the host to see its configuration

Paths