Take it like a gift

Exploitation of XXE vulnerability using direct and different out of band methods.

A modern experience for GDB with advanced debugging capabilities.

The missing GraphQL security security layer.

Authenticated SSRF in Grafana.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

The vertasile multi-threaded password sprayer built on the shoulders of giants.

Software reverse engineering (SRE) framework.

A pretty sweet vulnerability scanner.

Go shellcode loader that combines multiple evasion techniques.

Web debugging proxy for MacOS, Windows, and Linux.

Provides a suite of extensions and a maven plugin to automate security tests using Burp Suite.

Open-source phishing toolkit.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Check if your email or phone is in a data breach.

Used for REST API pentesting and provide UI solution for gem.