Take it like a gift

sponsor

A next-generation crawling and spidering framework.

A Windows potato to privesc.

Password list generator for orchestrating brute force attacks.

Server-side request forgery detector.

A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

Deserialization payload generator for a variety of .NET formatters.

Cross-platform very advanced and fast web fuzzer written in nim.

Tool written in Python simply to find XSS vulnerabilities in web application.

Reverse shell based on sshd supporting DNS and ICMP tunnelling as well as HTTP and Socks proxies.

A handy SMB enumeration tool.

Burp Suite extension for dynamic payload generation to detect injection flaws.

Perform advanced MiTM attacks on websites with ease.

Collection of multiple types of lists used during security assessments, collected in one place.

Some setup scripts for security research tools.

This tool extracts secrets from a pcap file or from a live interface.