Take it like a gift

Injects custom XSS payloads on every form/request submitted to detect blind XSS.

Identifies hidden, unlinked parameters, useful for finding web cache poisoning vulnerabilities.

CloudMapper helps you analyze your Amazon Web Services environments.

Lateral movement graph for Azure Active Directory.

Broken Link Hijacking Burp Suite extension.

Quickly find differences and similarities in disassembled code.

The leading security assessment framework for Android.

A multitool for tracking and locating nearby devices via their RF activities.

Designed to enable security teams to conduct advanced penetration tests with ease.

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

Tool to enumerate targets in search of cloud resources.

Another Subdomain ENumeration Tool.

A framework including all the tools that work on Windows.

Custom bash scripts used to automate various penetration testing tasks.

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.