Take it like a gift

This tool extracts secrets from a pcap file or from a live interface.

Cloud native runtime security.

The only cheat sheet you need.

HTTP parameter discovery suite.

Script that makes active and/or passive scan to obtain subdomains and search for open ports.

Automatic SSTI detection tool with interactive interface.

Domain name permutation engine for detecting several types of attacks.

Tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable.

Graphical tool for custom wordlist generation.

The most advance set of Content Security Policy tools.

Testing TLS/SSL encryption anywhere on any port.

Domain name permutation engine written in Go.

An automated SSRF finder. Just give the domain name and your server and chill!

Static analysis framework built in house to do security vetting for Android applications.

Finds unknown classes of injection vulnerabilities.