Take it like a gift

A Windows/Samba enumeration tool with additional features like JSON/YAML export.

Evenly distributes scanner load across targets.

Scans for different types of XSS on a list of urls.

A Chrome Extension to track postMessage usage (url, domain and stack).

The vertasile multi-threaded password sprayer built on the shoulders of giants.

Drone pentesting framework console.

A tool for extracting all the possible endpoints from the JS files.

Enumerate and extract GraphQL APIs.

Fast web fuzzer written in Go.

A wrapper around grep to avoid typing common patterns.

Sensitive data detection tool capable of scanning source code repositories.

A Burp Suite extension for finding the use of potentially dangerous methods/functions.

Script that makes active and/or passive scan to obtain subdomains and search for open ports.

An intentionally vulnerable web API game for learning and training purposes.

Asset discovery and identification tool.