Take it like a gift

A Chrome extension for fast and easy XSS fuzzing.

Point-and-click tool for producing advanced clickjacking and frame-slicing attacks.

Scans processes to detect and dump potentially malicious implants.

A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

Explore more than 778 billion web pages saved over time.

Software reverse engineering (SRE) framework.

API key/token exploitation made easy.

Identify usage of pre-shared Machine Keys in a application for encryption and decryption.

The Email OSINT tool.

One place for all the default credentials to assist on finding devices with default password.

Gather and update all available and newest CVEs with their PoC.

Samba scanning tool.

Helps you to detect SQL injection "Error based" by sending multiple requests.

A DNS bruteforcer with multi-threading, and handling of bad resolvers.

Help you coordinate your reconnaissance workflows across multiple devices.