Take it like a gift

Burp Suite plugin to test for authorization flaws.

Burp extension to decode NTLM SSP headers and extract domain/host information.

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

Generates combination of domain names from the provided input.

Quickly find and fix the vulnerabilities that put your web applications at risk of attack.

Enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Active Directory assessment and privilege escalation script.

Find broken links, missing images, etc within your HTML.

Automatically coerce a Windows server to authenticate on an arbitrary machine.

Overpower wordlist generator, words permutation and combinations, encoding/decoding...

Network protocol fuzzing for humans.

Secrets scanner that understands code.

Custom Word List Generator.

Find misconfiguration through LDAP to exploit weaknesses with Kerberos.