Take it like a gift

Security auditing tool for Linux, macOS, and UNIX-based systems.

Advanced discovery of Privileged Accounts, includes Shadow Admins.

Informative site with EoL dates of everything.

Represent any GraphQL API as an interactive graph.

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

Exploit Kubernetes clusters misconfigurations and be the swiss army knife of your pentests.

Pull secrets from an AWS environment.

Grabs screenshots and HTML of large numbers of websites.

Generates permutations, alterations and mutations of subdomains and then resolves them.

403/401 Bypass Methods.

Extends Burp Suite's active and passive scanning capabilities.

A Burp Suite extension made to automate the process of bypassing 403 pages.

Get the TOTP secrets exported by Google Authenticator.

File upload vulnerability scanner and exploitation tool.

Powerful open source XSS scanning tool and parameter analyzer.