Take it like a gift

Database protection suite with field level encryption and intrusion detection.

Tool for automating the search for IDOR vulnerabilities in web applications and APIs.

An enterprise friendly way of detecting and preventing secrets in code.

Collects RDP, web and VNC screenshots all in one place.

Active Directory certificate abuse.

Automated client-side template injection detection for AngularJS.

CRLFMap is a tool to find HTTP Splitting vulnerabilities.

Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.

Read local Chrome cookies without root or decrypting.

A Capture The Flag framework focusing on ease of use and customizability.

Burp Suite extension that allows request/response modification using a GUI.

Enumerating and attacking Java Remote Method Invocation services.

Extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.

Generates permutations, alterations and mutations of subdomains and then resolves them.

Crawl a site and extract useful informations for recon.