Take it like a gift

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

Knock Subdomain Scan.

Detects JWT algorithm and provides options to generate a new JWT based on another algorithm.

Tool that tests MANY url bypasses to reach a 40X protected page.

Solve Google reCAPTCHA in less than 5 seconds!

DNS Enumeration Script.

HTTP parameter discovery suite.

Very fast password cracking tool.

The most advance set of Content Security Policy tools.

Extract URLs, paths, secrets, and other interesting bits from JavaScript.

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

Automated blind-xss search for Burp Suite.

CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

Find subdomains on GitLab.

Self contained web shells and other attacks via .htaccess files.