Take it like a gift

User-Agent, X-Forwarded-For and Referer SQLI Fuzzer.

The most advanced penetration testing distribution.

Command line tool for testing CRLF injection on a list of domains.

A framework including all the tools that work on Windows.

Launchpad for bug bounty programs and bug bounty hunters.

Scrape domain names from SSL certificates of arbitrary hosts.

Network protocol fuzzing for humans.

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

Generates wordlists from the Burp sitemap.

Network forensic analysis tool that performs deep processing and inspection of network traffic.

Burp extension to decode NTLM SSP headers and extract domain/host information.

Extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.

Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.

GUI Burp Plugin to ease discovering of security holes in web applications.

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.