Take it like a gift

Tool to search secrets in various filetypes.

A tool to perform local searches for known vulnerabilities.

Cutting-edge project designed to automate the continuous discovery of vulnerabilities in webapps.

Extract data from a .git directory.

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Automated blind-xss search for Burp Suite.

Fluxion is the future of MITM WPA attacks.

Enemies Of Symfony - debug mode Symfony looter.

Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.

Burp Suite extension which injects non-invasive headers to reveal backend systems.

Standalone MITM attack framework allowing for the bypass of 2-factor authentication.

Interactive .NET SQL console client with enhanced SQL Server discovery/access/exfiltration features.

Gather information about the Active Directory and generates a report.

Ultimate domain enumeration tool.

A fast and minimal JS endpoint extractor.