Take it like a gift

Automated client-side template injection detection for AngularJS.

The most powerful CRLF injection scanner.

A vulnerable Android application with an interface to test your mobile hacking skills.

Massive hacking playground, and infosec community.

Cloud native runtime security.

HTTP proxy / monitor / reverse proxy that allows to view all of the HTTP(S) traffic.

A burpsuite extension to find security reports published on HackerOne based on the selected host.

Takes a list of IP addresses then does a series of checks to return associated domain names.

A repository with 3 tools for pwn'ing websites with .git repositories available.

Fast web fuzzer written in Go.

Connects to LDAP directory to retrieve all computers and users informations.

A damn vulnerable AWS infrastructure.

Tool to search secrets in various filetypes.

Burp Suite extension for dynamic payload generation to detect injection flaws.

A certificate transparency log keyword sniffer written in Python.