Take it like a gift

Manual search tool to find bugs like a grep unix command.

Gives root access on remote docker containers that expose their APIs.

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

Data exfiltration utility for testing detection capabilities.

A DNS reconnaissance tool for locating non-contiguous IP space.

The most advance set of Content Security Policy tools.

Automatically attempts default creds on found services based on Nmap output.

An extension that auto extracts URLs from the current webpage and JS files.

Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.

Find broken links, missing images, etc within your HTML.

Smart SSRF scanner using different methods like parameter brute forcing in POST and GET.

Online XSS tool with demonstration of vulnerability.

Offensive Google framework.

DigiNinja's bucket_finder utility.

The Browser Exploitation Framework is a penetration testing tool that focuses on the web browser.