Take it like a gift

Network forensic analysis tool for Windows.

Command line utility for searching and downloading exploits.

A project for fuzzing HTTP/1.1 CL.0 Request Smuggling attack vectors.

Burp extension to decode NTLM SSP headers and extract domain/host information.

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

A shiny new copy of Chromium that will bring colors in your hunt.

Fuzz request attributes using common pentesting techniques and lists vulnerabilities.

Burp Extender API.

Scanning APK file for URIs, endpoints & secrets.

Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.

The FLARE team's open-source tool to identify capabilities in executable files.

The AWS Cloud Post Exploitation framework!

An intentionally vulnerable web API game for learning and training purposes.

A vulnerable Android application with an interface to test your mobile hacking skills.

Obtain GraphQL API Schema even if the introspection is not enabled.