Take it like a gift

Customisable and automated HTTP header injection.

Check usernames on more than 100 websites, forums and social networks.

A burpsuite extension to find security reports published on HackerOne based on the selected host.

A mini webserver with FTP support for XXE payloads.

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.

Scan endpoints and identify exposition of sensitive services/files/folders.

Add headers to all Burp requests to bypass some WAF products.

The Linux memory acquisition tool.

Tool to generate stable undetected payload.

Fetches JavaScript files quickly and comprehensively from a defined list of URLs or domains.

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

Allow users to route Internet traffic through Tor and hide their real IP address.

Detects JWT algorithm and provides options to generate a new JWT based on another algorithm.

Automation tool designed to enumerate subdomains and detect bugs using different open-source tools.

Automatic authorization enforcement detection extension for Burp Suite.