A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks.
Go365 performs user enumeration and password guessing attacks on organizations that use Office365.
DS_Store file parser/viewer.
Try to find the origin IP of a webapp protected by Cloudflare.
Fully customizable Windows-based pentesting virtual machine distribution.
Overpower wordlist generator, words permutation and combinations, encoding/decoding...
Burp Extension for a passive scanning JS files for endpoint links.
Helping you become a BugBountyHunter.
In-depth Attack Surface Mapping and Asset Discovery.
Power security researchers around the world as well as code scanning.
A certificate transparency log keyword sniffer written in Python.
Contextual content discovery tool.
A fast and minimal JS endpoint extractor.
A Burp Suite extension to find potential endpoints and parameters.
Awesome cloud enumerator.
