Take it like a gift

XSS payloads designed to turn alert(1) into P1.

Vulnerable application with a web service and an API.

A Linux privilege escalation check script.

Modular cross-platform Microsoft Graph API enumeration and exploitation toolkit.

Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.

Find critical backup files by creating a dynamic wordlist based on the domain.

Linux enumeration tool for pentesting and CTFs with verbosity levels.

Leverage ASN to look up IP addresses owned by a specific organization.

A tool to perform local searches for known vulnerabilities.

Custom word list generator redefined, based on the Scrapy framework.

Post-exploitation and adversary emulation framework that is used to aid Red Teams and pentesters.

Obfuscation script designed to bypass AMSI and commercial antivirus solution.

Capture and replay live HTTP traffic in order to continuously test your system with real data.

The only cheat sheet you need.

Free, online web security training from the creators of Burp Suite.