Has anyone here tried OnScanner for attack surface discovery and vulnerability validation?

If you're a bug bounty hunter, security researcher, pentester, or website owner, you should check out OnScanner.

I've been using it regularly, and one thing that stands out is that it doesn't stop at fingerprinting services and matching CVEs.

For each discovered host, it runs a large number of validation checks and exploit-based tests to determine whether vulnerabilities are actually present and whether security fixes have been properly applied.

A few things I like:

• Attack surface mapping (domains, subdomains, IPs, DNS, ASN, SSL/TLS)