PHP unserialize() payloads along with a tool to generate them.
Automation of tokens/api keys testing.
Damn Vulnerable Web Application.
Capture and replay live HTTP traffic in order to continuously test your system with real data.
Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.
Wireless network auditing tool.
Automatically extract obfuscated strings from malware.
Toolkit to detect and keep track on Blind XSS, XXE & SSRF.
The ultimate Vulnerability Disclosure Policy and Bug Bounty list!
Finds Directory Listings or open S3 buckets from a list of URLs.
Prevents you from committing secrets and credentials into git repositories.
Scrape domain names from SSL certificates of arbitrary hosts.
Stalk your friends on social media using image recognition and reverse image search.
Fuzz request attributes using common pentesting techniques and lists vulnerabilities.
Used for REST API pentesting and provide UI solution for gem.
