Take it like a gift

bbradar.io
featured
bbradar.io

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

sqlipy
sqlipy

Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

AzureGoat
AzureGoat

A damn vulnerable Azure infrastructure.

Klyda
Klyda

Highly configurable script for dictionary/spray attacks against online web applications.

favirecon
favirecon

Use favicon.ico to improve your target recon phase.

Frida
Frida

Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.

CeWLeR
CeWLeR

Custom word list generator redefined, based on the Scrapy framework.

Distribute Damage
Distribute Damage

Evenly distributes scanner load across targets.

Charles
Charles

HTTP proxy / monitor / reverse proxy that allows to view all of the HTTP(S) traffic.

gateway-finder-imp
gateway-finder-imp

Identify routers on the local LAN and paths to the Internet.

Ghostbuster
Ghostbuster

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

403-bypasser
403-bypasser

A Burp Suite extension made to automate the process of bypassing 403 pages.

bypasswaf
bypasswaf

Add headers to all Burp requests to bypass some WAF products.

differer
differer

differer finds how URLs are parsed by different languages in order to help bug hunters break filters.

certSniff
certSniff

A certificate transparency log keyword sniffer written in Python.