Take it like a gift

MSSQLi-DUET
MSSQLi-DUET

SQL injection script for Microsoft SQL Server.

UploadScanner
UploadScanner

HTTP file upload scanner for Burp Proxy.

Luyten
Luyten

An Open Source Java Decompiler GUI for Procyon.

MapperPlus
MapperPlus

An advanced source map extractor based on headless browser.

Runtime Mobile Security
Runtime Mobile Security

A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.

Print-My-Shell
Print-My-Shell

Automate the process of generating various reverse shells.

pingcastle
pingcastle

Get Active Directory security at 80% in 20% of the time.

ScrapeIn
ScrapeIn

Harvest employee email addresses from a specific company through LinkedIn.

Mass3
Mass3

Enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP.

PhoneInfoga
PhoneInfoga

Information gathering framework for phone numbers.

merlin
merlin

Cross-platform post-exploitation HTTP/2 Command & Control server and agent.

PortSwigger WebSecurity Academy
PortSwigger WebSecurity Academy

Free, online web security training from the creators of Burp Suite.

Rock-ON
Rock-ON

All in one recon tool that just get a single domain name and do all of the work alone.

ppmap
ppmap

Exploitation tool which leverages client-side Prototype Pollution to XSS.

MalwareBazaar
MalwareBazaar

Malware sample database.