Take it like a gift

featured

Small and highly portable detection tests based on MITRE's ATT&CK.

A Python Framework For NoSQL Scanning and Exploitation.

Fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.

Extract URLs, paths, secrets, and other interesting bits from JavaScript.

Gather and update all available and newest CVEs with their PoC.

Fully automated WPA PSK PMKID and handshake capture script.

Powerful and user-friendly password hunting tool.

Generates permutations, alterations and mutations of subdomains and then resolves them.

HTTP 403 bypass tool.

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.

Automate your application security orchestration and correlation (ASOC).

Beautifier for JavaScript.

Burp Suite extension for dynamic payload generation to detect injection flaws.

Bash script which checks and validates for leaked credentials.

A Burp Suite extension that checks for the HTTPoxy vulnerability.