Take it like a gift

sponsor

Collect and maintain internet-wide assets data for public Bug Bounty programs.

C2 and proxy designed to help in the exploitation of XSS and malicious Service Workers.

Command line utility for searching and downloading exploits.

GUI Burp Plugin to ease discovering of security holes in web applications.

Automates the discovery and pwnage of ACLs in Active Directory that are unsafe configure.

Small and highly portable detection tests based on MITRE's ATT&CK.

Tool that tests MANY url bypasses to reach a 40X protected page.

Burp Extension for a passive scanning JS files for endpoint links.

Grab NetNTLMv2 hashes using ETW with administrative rights on Windows.

Automated HTTP request repeating with Burp Suite.

Create SSL client fingerprints in an easy to produce and shareable way.

This script enumerates the permissions of all the AWS principals of an account.

Common User Passwords Profiler.

Automated NoSQL database enumeration and web application exploitation tool.

Get Active Directory security at 80% in 20% of the time.