Take it like a gift

Steganography program that hides secrets in the least significant bits of a file.

Scans the top 500 sites daily for their security.txt file or DNS records.

A multitool for tracking and locating nearby devices via their RF activities.

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

HTTP Request Smuggling Detection Tool.

Hex editor for reverse engineers, programmers and people who value their retinas when working at 3am.

Manage Burp Suite certificate in Android to redirect all traffic to Burp Suite.

Represent any GraphQL API as an interactive graph.

Provides view with filtering capabilities for all requests from all Burp Suite tools.

The Linux memory acquisition tool.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

A tool for reverse engineering Android APK files.

Find origin servers of websites behind Cloudflare by using Internet-wide scan data from Censys.

Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.