Take it like a gift

featured

Capture and replay live HTTP traffic in order to continuously test your system with real data.

featured

CORS Misconfiguration Scanner.

Subdomain enumeration tool with analysis features for discovered domains.

Rip web accessible version control systems: svn, git...

A certificate transparency log keyword sniffer written in Python.

Patch management, vulnerability scanning, and network auditing.

A JavaScript Engine Fuzzer.

Add headers to all Burp requests to bypass some WAF products.

Create vulnerable instrumented local or cloud environments to simulate attacks.

Utility to embed XXE and XSS payloads in docx, odt, pptx...

A Burp Suite extension to find potential endpoints and parameters.

A powerful network scanner, DNS recon, subdomain enumeration and IP Geolocator tool powered by GPT.

Quickly find and fix the vulnerabilities that put your web applications at risk of attack.

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.