Take it like a gift

sponsor

Fast and customizable subdomain wordlist generator using DSL.

CLI & library to search for default credentials among thousands of products/vendors.

Gather and update all available and newest CVEs with their PoC.

A Burp Suite extension made to automate the process of bypassing 403 pages.

Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.

Burp Suite extension for dynamic payload generation to detect injection flaws.

John Hammond YouTube channel.

An easy way for penetration testers and bug bounty hunters to test (blind) XSS.

Bug Bounty notes gathered from various sources.

Powerful and user-friendly password hunting tool.

Generate wordlist based on the URLs to check for backup, installation, etc files.

Simple tool to scan large scope and provide SSL/TLS vulnerabilities.

Simple, fast web crawler designed for discovery of endpoints and assets within a web application.

A comprehensive scanner for Google Cloud.

A library for detecting known secrets across many web frameworks.