Take it like a gift

A comprehensive scanner for Google Cloud.

Exploitation framework for embedded devices.

Add headers to all Burp requests to bypass some WAF products.

Subdomain takeover tool for attackers, bug bounty hunters and the blue team!

VM that is built from the ground up with a large amount of security vulnerabilities.

Scrape domain names from SSL certificates of arbitrary hosts.

Open-source Intelligence Framework.

Command line tool for testing CRLF injection on a list of domains.

A web scraper to scrape email's and phone numbers from websites.

Runs a scan using Dastardly by Burp Suite against a target site and generates a report.

A self-hosted fuzzing-as-a-service platform.

Burp Suite extension which injects non-invasive headers to reveal backend systems.

Hack with JavaScript.

Attack clients through file content swapping and compromise any data passed in cleartext.

Web Fuzzer.