Take it like a gift

leakScraper
leakScraper

Set of tools to process and visualize huge text files containing credentials.

0d1n
0d1n

Tool for automating customized attacks against web applications.

angr
angr

A powerful and user-friendly binary analysis platform.

Atomic Red Team
Atomic Red Team

Small and highly portable detection tests based on MITRE's ATT&CK.

Autorize
Autorize

Automatic authorization enforcement detection extension for Burp Suite.

assetfinder
assetfinder

Find domains and subdomains related to a given domain.

authz
authz

Burp Suite plugin to test for authorization flaws.

BurpSentinel
BurpSentinel

GUI Burp Plugin to ease discovering of security holes in web applications.

catphish
catphish

Generate similar-looking domains for phishing attacks.

Arjun
Arjun

HTTP parameter discovery suite.

ATOR
ATOR

Authentication Token Obtain and Replace Extender.

4-ZERO-3
4-ZERO-3

403/401 Bypass Methods.

brutas
brutas

Wordlists handcrafted and automated with <3

2tearsinabucket
2tearsinabucket

Enumerate s3 buckets for a specific target.

CDN Proxy
CDN Proxy

Create a copy of a targeted website with CDN and WAF restrictions disabled.