Take it like a gift

Offers crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

Extract endpoints from APK files.

Another Subdomain ENumeration Tool.

A one-stop pentesting checklist and logger tool.

Burp Suite plugin that extracts keywords from response using and test for reflected XSS.

Copy a Burp Suite request to a file or the clipboard as multiple programming languages functions.

Powerful and user-friendly password hunting tool.

A static analyzer for Java, C, C++, and Objective-C.

Exfiltrate files from a target's Google Drive that you have access to, via Google's API.

Enumerate an Active Directory environment with LDAP queries.

In-depth Attack Surface Mapping and Asset Discovery.

Gather all companies acquired by a given company domain name.

Powershell tool to automate Active Directory enumeration.

Automated penetration testing reporting system.

Public malware techniques used in the wild: virtual machine, emulation, debuggers.