Take it like a gift

WPScan WordPress Security Scanner

Check egress filtering and identify if ports are allowed to automatically spawn a shell.

Android and Java bytecode viewer.

Burp Suite extension that allows request/response modification using a GUI.

A default credential scanner.

Take a list of resolved subdomains and output any corresponding CNAMES en masse.

Page change monitoring with alerts a breezem, the best way to monitor website changes.

Generate CobaltStrike's cross-platform payload.

A swiss army knife for pentesting networks.

Automating situational awareness for cloud penetration tests.

Lists CVEs that are currently being discussed on the social network Mastodon.

Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.

Discover new target domains using Content Security Policy.

Brute forcing tool that support several uncommon protocols.

Automated All-in-One OS Command Injection Exploitation Tool.