Take it like a gift

sponsor

A next-generation crawling and spidering framework.

NoSql Injection CLI tool for finding vulnerable websites using MongoDB.

Burp Extension for GraphQL Security Testing.

Prevent cloud misconfigurations and find vulnerabilities during build-time.

Collect, categorize and highlight requests and/or responses according to their content.

HTTP-traceroute in Go.

List DTDs and generate XXE payloads using those local DTDs.

A Burp Suite extension for finding the use of potentially dangerous methods/functions.

For when you want a computer to be done - without admin!.

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

DS_Store file parser/viewer.

A social media enumeration & correlation tool.

A powerful and useful hacker dictionary builder for a brute-force attack.

Information gathering framework for phone numbers.

Remotely exploit Android devices using ADB and Metasploit.