Take it like a gift

CLI client for deps.dev API.

A comprehensive scanner for Google Cloud.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

A framework including all the tools that work on Windows.

A certificate transparency log keyword sniffer written in Python.

A repository with 3 tools for pwn'ing websites with .git repositories available.

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities.

Next generation web scanner.

Attack patterns and primitives for black-box application fault injection and resource discovery.

Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.

Find domains and subdomains related to a given domain.

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.

The perfect butler for pentesters, bug-bounty hunters and security researchers.

A work-in-progress deobfuscator for movfuscated binaries.