Take it like a gift

sponsor

A next-generation crawling and spidering framework.

A python script that finds endpoints in JavaScript files.

An extension that auto extracts URLs from the current webpage and JS files.

A default credential scanner.

Injects custom XSS payloads on every form/request submitted to detect blind XSS.

A shiny new copy of Chromium that will bring colors in your hunt.

Remote capture for all capture types over TCP sockets or websockets.

DOM XSS scanner for Single Page Applications.

HTTP parameter discovery suite.

Passive enumeration utility For Android applications.

The most powerful CRLF injection scanner.

An interactive multi-user web JS shell.

Bruteforce existing subdomains and provide informations about them.

A burpsuite extension to find security reports published on HackerOne based on the selected host.

An intentionally vulnerable web API game for learning and training purposes.