Take it like a gift

sponsor

Fast and customizable subdomain wordlist generator using DSL.

Injects custom XSS payloads on every form/request submitted to detect blind XSS.

A tool to hunt for credentials in GitHub wild AKA git*hunt.

Performs buckets checks from a given list of subdomains.

Quickly and accurately create a visual representation of their Nmap output.

A plugin-based scanner that aids security researchers in identifying issues with several CMSs.

Check your WAF before an attacker does.

Fully automated WPA PSK PMKID and handshake capture script.

A tool used to check if a CNAME resolves to the scope address.

No-root network monitor, firewall and PCAP dumper for Android.

Cover your tracks during Linux exploitation by leaving zero traces on the exploited system.

Web Inventory tool, takes screenshots and provides some extra bells&whistles to make life easier.

Automated firmware analysis tool for composition analysis and vulnerability scanning.

Denial of Service Toolkit.

Toolkit to detect and keep track on Blind XSS, XXE & SSRF.