Take it like a gift

sponsor

An OOB interaction gathering server and client library

featured

Grabs screenshots and HTML of large numbers of websites.

Runs a scan using Dastardly by Burp Suite against a target site and generates a report.

Python script to parse relative URLs from JavaScript files.

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks.

Extract domains/subdomains from URLs en masse.

Domain name permutation engine written in Go.

A static analyzer for Java, C, C++, and Objective-C.

HTTP Request Smuggling Detection Tool.

Checks and hardens your Windows configuration.

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.

A curated list of bugbounty writeups (Bug type wise).

Active Directory Certificate Services enumeration and abuse.

Golang client for querying SecurityTrails API data.