Take it like a gift

Filter and enrich a list of subdomains by level.

Fully customizable Windows-based pentesting virtual machine distribution.

A framework which tries to unite great tools and make pentesting more efficient.

PortSwigger XSS cheat sheet that contains many vectors that can help you bypass WAFs and filters.

OSINT tool for finding Github repositories by extracting commit logs in real time.

Awesome cloud enumerator.

The most advance set of Content Security Policy tools.

A multi-threaded scanner that helps identify CORS flaws/misconfigurations.

Active Directory certificate abuse.

Simple latest CVE collector written in Python.

CRLFMap is a tool to find HTTP Splitting vulnerabilities.

A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

Generate CobaltStrike's cross-platform payload.

Try to find the origin IP of a webapp protected by Cloudflare.

Web Fuzzer.