Take it like a gift

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

Damn Vulnerable Web Application.

Free web-application vulnerability and version scanner.

Overpower wordlist generator, words permutation and combinations, encoding/decoding...

Utility to embed XXE and XSS payloads in docx, odt, pptx...

Capture and replay live HTTP traffic in order to continuously test your system with real data.

A fuzzing tool written in Go. It helps your pentesting journey.

Quickly do keyword searches over GitLab and GitHub for OSINT & bug bounty recon.

Crack hashes in seconds.

An Internet Explorer post exploitation library.

Burp Suite extension that allows request/response modification using a GUI.

Go shellcode loader that combines multiple evasion techniques.

Advanced Google searches using dorks to locate specific files on the internet.

A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

Generates gopher link for exploiting SSRF and gaining RCE in various servers.