Take it like a gift

CRLF and open redirect fuzzer.

Cross-platform post-exploitation HTTP/2 Command & Control server and agent.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

Get the TOTP secrets exported by Google Authenticator.

A powerful and user-friendly binary analysis platform.

Collects informations related to domains whois, history, dns records and more.

A tool for extracting all the possible endpoints from the JS files.

Web Application Security Scanner Framework.

Gather information about the Active Directory and generates a report.

A DNS bruteforcer with multi-threading, and handling of bad resolvers.

Damn Vulnerable Web Application.

Active Directory Report Tool.

Passive enumeration utility For Android applications.

A Windows/Samba enumeration tool with additional features like JSON/YAML export.

Extends Burp Suite's active and passive scanning capabilities.