[ self-hosted kit — authorized testing only ]
| x.y7c.me | blind-XSS / callback collector |
| webhook.y7c.me | HTTP request capture bins |
| jwt.y7c.me | JWT inspector (decodes in-browser) |
| redir.y7c.me | redirect-chain tracer (SSRF-guarded) |
| cc.y7c.me | CyberChef — encoding / crypto / data wrangling |
y7c // authorized security testing only