Take it like a gift

Get Active Directory security at 80% in 20% of the time.

Threat framework to research security gaps in GraphQL implementations.

Automatic authorization enforcement detection extension for Burp Suite.

Blind SQL Injection Tool with Golang.

Generates DNS wordlists through permutations.

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.

A library for detecting known secrets across many web frameworks.

Custom Word List Generator.

Automates the process of detecting and exploiting SQL injection security flaws.

Fully customizable Windows-based pentesting virtual machine distribution.

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

Directory/File, DNS and VHost busting tool written in Go.

Internet search engines for security researchers.

Network, recon and offensive-security tool for Linux.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.