Take it like a gift

LinkedIn enumeration tool to get employee names from an organization using scraping.

Credentials recovery project.

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

Post-exploitation tool for dumping and extracting LSASS memory discreetly.

All-in-one plugin for the detection and exploitation of Java deserialization vulnerabilities.

Command line IPSEC VPN brute forcing tool for Linux.

Extract endpoints from source files.

Modern and malleable post-exploitation command and control framework.

The missing GraphQL security security layer.

Check if your email or phone is in a data breach.

Locate and attack Lync and Skype for Business.

SSRF testing tool.

Runs the best set of tools to perform scanning and finding out vulnerabilities on a target domain.

Automatic tool for DNS rebinding-based SSRF attacks.

Free, online web security training from the creators of Burp Suite.