|
|
![](https://assets.offsec.tools/tools/goaltdns-4163.png) |
|
GoAltdns |
|
A permutation generation tool written in golang. |
|
|
![](https://assets.offsec.tools/tools/knoxnl-1259.png) |
|
Knoxnl |
|
This is a python wrapper around the amazing KNOXSS. |
|
|
![](https://assets.offsec.tools/tools/jsgen-8094.png) |
|
JSgen |
|
Generate javascript code to be injected in case you find a Server Side Javascript Injection. |
|
|
![](https://assets.offsec.tools/tools/api-fuzzer-5098.png) |
|
API fuzzer |
|
Fuzz request attributes using common pentesting techniques and lists vulnerabilities. |
|
|
![](https://assets.offsec.tools/tools/takeover-2143.png) |
|
takeover |
|
A tool for testing subdomain takeover possibilities at a mass scale. |
|
|
![](https://assets.offsec.tools/tools/co2-9338.png) |
|
co2 |
|
A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool. |
|
|
![](https://assets.offsec.tools/tools/gsan-3663.png) |
|
GSAN |
|
Extract subdomains from SSL certificates in HTTPS sites. |
|
|
![](https://assets.offsec.tools/tools/headi-5234.png) |
|
headi |
|
Customisable and automated HTTP header injection. |
|
|
![](https://assets.offsec.tools/tools/see-surf-5101.png) |
|
See-SURF |
|
Detect Vulnerable SSRF parameters. |
|
|