Take it like a gift

A burpsuite extension to find security reports published on HackerOne based on the selected host.

Fetch many paths for many hosts, without killing the hosts.

Decompile and debug binary code and obfuscated apps, break down and analyze document files.

Multi-cloud security auditing tool.

Fast and customizable vulnerability scanner for Jira.

NahamSec Twitch channel.

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities.

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.

VM that is built from the ground up with a large amount of security vulnerabilities.

Sharing knowledge that makes your life as bug hunters and pentesters easier.

A tool used to check if a CNAME resolves to the scope address.

Medusa is a speedy, parallel, and modular, login brute-forcer.

Automated HTTP request repeating with Burp Suite.

Web service that allows for detection Blind XSS vulnerabilities within web applications.

List of awesome CobaltStrike resources.