Take it like a gift

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

Open-source penetration testing tool that automates the process of exploiting XSS.

The most advanced client-side prototype pollution scanner.

Focuses DNS MX records and detects misconfigured MX records.

Exploitation of XXE vulnerability using direct and different out of band methods.

A fully configurable LinkedIn scraper: scrape anything within LinkedIn.

Compares target patch levels against the Microsoft vulnerability DB to detect missing patches.

A PowerShell tool heavily inspired by the popular tool CrackMapExec/NetExec.

Discover what runs a website.

A powerful shell script to maximize the recon and data collection process.

Detect which CMS a site is using.

Advanced fuzzing librar. Slot your fuzzers together and extend their features using Rust.

Enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP.

Next generation web scanner.

QEMU Interactive Runtime Analyser.