Take it like a gift

chipsec
featured
chipsec

Platform security assessment framework.

GoAltdns
GoAltdns

A permutation generation tool written in golang.

Recon-ng
Recon-ng

OSINT tool aimed at reducing the time spent harvesting information from open sources.

DirSearch
DirSearch

A Go implementation of dirsearch.

caido
caido

A lightweight web security auditing toolkit.

cloudflare-origin-ip
cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

django-DefectDojo
django-DefectDojo

DevSecOps, ASPM, Vulnerability Management.

bounty-targets-data
bounty-targets-data

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

BurpSuiteHTTPSmuggler
BurpSuiteHTTPSmuggler

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

CSP Evaluator
CSP Evaluator

Check CSP serves as a strong mitigation against cross-site scripting attacks.

Acunetix
Acunetix

Quickly find and fix the vulnerabilities that put your web applications at risk of attack.

AutoRepeater
AutoRepeater

Automated HTTP request repeating with Burp Suite.

Cr3dOv3r
Cr3dOv3r

Know the dangers of credential reuse attacks.

DependencyCheck
DependencyCheck

Utility that detects publicly disclosed vulnerabilities in application dependencies.

CertCrunchy
CertCrunchy

Uses data from SSL Certificates to find potential host names.