Take it like a gift

Intelligence tool to do OSINT tasks and more but without any API key.

Stalk your friends on social media using image recognition and reverse image search.

Find out what websites are Built With.

Lists CVEs that are currently being discussed on the social network Mastodon.

A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

Generates combination of domain names from the provided input.

Secrets scanner that understands code.

OSINT tool to find usernames across 80+ social media and social networking sites.

Domain name permutation engine written in Go.

Yet another subdomain finder.

The leading security assessment framework for Android.

Automated All-in-One OS Command Injection Exploitation Tool.

A Burp Suite extension for finding the use of potentially dangerous methods/functions.

Divide full port scan results and use it for targeted Nmap runs.

Check CSP serves as a strong mitigation against cross-site scripting attacks.