Take it like a gift

sponsor

A next-generation crawling and spidering framework.

Local file inclusion exploitation tool.

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

A tool to dump a git repository from a website.

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

An interactive multi-user web JS shell.

The FLARE team's open-source tool to identify capabilities in executable files.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

Decrypt passwords/cookies/history/bookmarks from the browser.

A damn vulnerable AWS infrastructure.

A burpsuite extension to find security reports published on HackerOne based on the selected host.

Check for and exploit LFI vulnerabilities with a focus on PHP systems.

HTTP parameter discovery suite.

Scope gathering tool for multiple Bug Bounty platforms.

A tool for searching a Git repository for interesting content.