Take it like a gift

A mini webserver with FTP support for XXE payloads.

Secret Detection Tool.

Embeds XXE/XML exploits into different filetypes.

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

Parse OpenAPI specifications into the BurpSuite for automating RESTful API testing.

Tool to scan for secret files on HTTP servers.

Subdomains enumeration tool for penetration testers.

Collaborative forensic timeline analysis.

Tool for fingerprinting and exploiting Amazon cloud infrastructures.

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

Detect Vulnerable SSRF parameters.

Checks if a list of domains can be spoofed based on SPF and DMARC records.

Helps you to detect SQL injection "Error based" by sending multiple requests.

Testing TLS/SSL encryption anywhere on any port.