Take it like a gift

Automate building wordlists for AppSec directory/resource bruting.

A Go tool for scope management.

A nonprofit foundation that works to improve the security of software.

Scan for open S3 buckets and dump the contents.

A multi-target URL bruteforcer.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card wirelessly.

Tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable.

Burp Extension for copying requests safely.

Burp Suite extension to create target specific and tailored wordlist from burp history.

Microsoft SQL database attacking tool.

Rapidly detect and respond to any threat, anywhere. See Everything. Fear Nothing.

A network sniffer that logs all DNS server replies for use in a passive DNS setup.

Navigate and conquer Microsoft SQL Server servers and their linked instances.