Take it like a gift

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

The complete solution for domain recognition.

Set of tools to process and visualize huge text files containing credentials.

Contains HackerOne disclosed reports and other bug bounty writeups.

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

Bruteforce existing subdomains and provide informations about them.

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

Tool to find metadata and hidden information in the documents.

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Discover the netblocks or ranges (in CIDR notation) owned by the target organization.

A DNS bruteforcing wordlist generator.

Provides a suite of extensions and a maven plugin to automate security tests using Burp Suite.

Gives root access on remote docker containers that expose their APIs.

A lightweight web security auditing toolkit.

Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.