Take it like a gift

A mini webserver with FTP support for XXE payloads.

This extension will help you to detect GET/POST based XSS vulnerability in any website easily.

Hosted Reverse Shell generator with a ton of functionality.

Burp Suite Extension useful to verify OAUTHv2 and OpenID security.

A Firefox/Burp Suite extension that provide usefull tools for your security audit.

Generates lists of live hosts and URLs.

All in one tool for information gathering, vulnerability scanning and crawling.

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

Rust-based high performance domain permutation generator.

Post-exploitation tool for dumping and extracting LSASS memory discreetly.

A light-weight first-stage C2 implant written in Nim.

Combines the speed of masscan with the reliability and detailed enumeration of nmap.

A Workflow Engine for Offensive Security

SecretFinder is a script based on LinkFinder, written to find sensitive data in JavaScript files.

Learn how OWASP Top 10 security risks apply to web applications developed using Node.js.