Take it like a gift

featured

Combine your rewards from platforms giving you insights about your bug hunting progress.

featured

Identify usage of pre-shared Machine Keys in a application for encryption and decryption.

Hijacking forgotten & misconfigured subdomains.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

Six Degrees of Domain Admin.

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.

Stealth redirector for your red team operation security.

Automation framework for running multiple open sourced subdomain bruteforcing tools in parallel.

Pinpoint the security issues that actually matter.

OSINT automation for hackers.

Burp extension to decode NTLM SSP headers and extract domain/host information.

Find out what websites are Built With.

Network brute force tool, faster than other existing solutions.

Injects custom XSS payloads on every form/request submitted to detect blind XSS.

Scan your source code against top security and privacy risks.