Take it like a gift

sponsor

Fast and customizable subdomain wordlist generator using DSL.

Identify technologies on websites.

A tool for extracting all the possible endpoints from the JS files.

Find domains and subdomains related to a given domain.

JavaScript Object Signing and Encryption Pentesting Helper.

A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.

Burp Suite extension to help make Graphql request more readable.

Active Directory Report Tool.

Extract subdomains from SSL certificates in HTTPS sites.

Find sensitive information for a git repo.

The class-leading vulnerability scanning, penetration testing, and web app security platform.

List DTDs and generate XXE payloads using those local DTDs.

Helps to identify IoT related dashboards and scan them for default passwords.

Helping you become a BugBountyHunter.

Fetch known URLs from several sources.