Take it like a gift

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

CloudMapper helps you analyze your Amazon Web Services environments.

A powerful network scanner, DNS recon, subdomain enumeration and IP Geolocator tool powered by GPT.

Automatic tool for DNS rebinding-based SSRF attacks.

An open-source, free protector for .NET applications.

DNS asynchronous brute force utility.

The Damn Vulnerable Router Firmware project.

OSINT tool to find usernames across 80+ social media and social networking sites.

Finds unknown classes of injection vulnerabilities.

Authenticated SSRF in Grafana.

A runtime mobile application analysis toolkit with a Web GUI.

Burp Extension for GraphQL Security Testing.

PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API.

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

A burpsuite extension to find security reports published on HackerOne based on the selected host.