Take it like a gift

Search engine for Internet-connected devices.

Automated blind-xss search for Burp Suite.

Takes a list of IP addresses then does a series of checks to return associated domain names.

Generates wordlists from the Burp sitemap.

Chrome extension that finds DOM based XSS vulnerabilities.

Check for LDAP protections regarding the relay of NTLM authentication.

Finding assets and subdomains from certificates! Scan the web!

A simple certificate expiration monitor script.

Prevent cloud misconfigurations and find vulnerabilities during build-time.

A free class for web security.

The only cheat sheet you need.

HTTP parameter discovery suite.

Generate wordlists of passwords containing cities at a defined distance around the client city.

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

Uncover the true IP address of websites safeguarded by Cloudflare & others.