Take it like a gift

A multi-threaded scanner that helps identify CORS flaws/misconfigurations.

Allows you to intercept and edit HTTP/HTTPS requests and responses.

Assist with creating tailored wordlists, mostly based on geolocation.

Obtain GraphQL API Schema even if the introspection is not enabled.

Unleash metadata intelligence, bridging the chasm in metadata extraction and analysis.

Fuzz request attributes using common pentesting techniques and lists vulnerabilities.

CMS Detection and Exploitation suite that supports over 180 other CMSs.

A wrapper script which uses PuTTY to perform SSH login bruteforce attacks.

It's the C version of sshLooter.

A Burp Suite extension for finding the use of potentially dangerous methods/functions.

Try to find the origin IP of a webapp protected by Cloudflare.

Runtime mobile exploration.

IIS shortname scanner written in Go.

Network protocol fuzzing for humans.

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks.