Take it like a gift

featured

An extension that auto extracts URLs from the current webpage and JS files.

Enumerate an Active Directory environment with LDAP queries.

Find subdomains on GitHub.

Tool to find metadata and hidden information in the documents.

Take screenshots of websites, provide server header info and identify default credentials.

Damn vulnerable cloud application.

Graphical user interface for Metasploit Meterpreter and session handler.

Vulnerability scanner for mass detection of web-based applications vulnerabilities.

Burp extension to decode NTLM SSP headers and extract domain/host information.

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.

Sensitive data detection tool capable of scanning source code repositories.

Fast web fuzzer written in Go.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Perform automated network reconnaissance scans to gather network intelligence.

Vulnerable by design AWS deployment tool.