Take it like a gift

Command-line tool for finding in-scope targets for bug bounty programs.

Enumerate and extract GraphQL APIs.

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

Lateral movement graph for Azure Active Directory.

Automation of tokens/api keys testing.

The Damn Vulnerable Router Firmware project.

Designed to enable security teams to conduct advanced penetration tests with ease.

Try to find the origin IP of a webapp protected by Cloudflare.

Realtime map that integrates Firebase, Google Maps and Shodan.

The missing GraphQL security security layer.

Free Flash decompiler.

A .NET tool for exporting and importing certificates without touching disk.

Identify usage of pre-shared Machine Keys in a application for encryption and decryption.

Powerful open source XSS scanning tool and parameter analyzer.

Infect an existing Android application with a Meterpreter payload.