Take it like a gift

sponsor

Quickly maps organization network ranges using ASN information.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

A list of strings which have a high probability of causing issues when used as user-input data.

The AWS Cloud Post Exploitation framework!

Open Redirection Analyzer.

Finds unknown classes of injection vulnerabilities.

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan.

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

The only cheat sheet you need.

Detect, track and alert on infrastructure drift.

A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.

Default passwords database sorted by manufacturers.

Finds Directory Listings or open S3 buckets from a list of URLs.

Route53/CloudFront Vulnerability assessment utility.

Find out what websites are Built With.