Take it like a gift

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.

Customisable and automated HTTP header injection.

Improved version of SayCheese, designed to capture images via social engineering.

Fully automated WPA PSK PMKID and handshake capture script.

An extension that auto extracts URLs from the current webpage and JS files.

A comprehensive scanner for Google Cloud.

The Burp extension helps you to find authorization bugs.

Collect, categorize and highlight requests and/or responses according to their content.

Blind SQL Injection Tool with Golang.

Reverse engineering and pentesting for Android applications.

Take a list of domains/subdomains and probe for working http/https server.

Automated blind-xss search for Burp Suite.

Automated All-in-One OS Command Injection Exploitation Tool.

Interactive CTF exploration tool.

Tool for automating customized attacks against web applications.