Take it like a gift

Yet another subdomain finder.

Python tool to remotely extract credentials on a set of hosts.

Check for dozens of common best-practices around deploying Docker containers in production.

Automatically brute force all services running on a target.

Improve the active and passive Burp Suite scanner by means of custom rules through GUI.

Common User Passwords Profiler.

An intentionally vulnerable web API game for learning and training purposes.

Chrome extension that finds DOM based XSS vulnerabilities.

Provides a suite of extensions and a maven plugin to automate security tests using Burp Suite.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

Tool written in Python simply to find XSS vulnerabilities in web application.

An enterprise friendly way of detecting and preventing secrets in code.

GUI Burp Plugin to ease discovering of security holes in web applications.

Network brute force tool, faster than other existing solutions.

A simple certificate expiration monitor script.