Take it like a gift

Discover the netblocks or ranges (in CIDR notation) owned by the target organization.

Convolutional neural network for analyzing pentest screenshots.

Scans the top 500 sites daily for their security.txt file or DNS records.

An easy way for penetration testers and bug bounty hunters to test (blind) XSS.

A pretty sweet vulnerability scanner.

Makes the maniputation of MAC addresses of network interfaces easier.

Site fast fuzzing with chorme extension.

Extract subdomains from SSL certificates in HTTPS sites.

Capture and replay live HTTP traffic in order to continuously test your system with real data.

A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.

Useful tool to track location or mobile number.

A tool for searching a Git repository for interesting content.

HTTP Request Smuggling over HTTP/2 Cleartext.

A fast and minimal JS endpoint extractor.

Privilege escalation tool for Windows.