Take it like a gift

403/401 Bypass Methods.

Automate the process of generating various reverse shells.

GraphQL Server Engine Fingerprinting utility for software security professionals.

Gather urls from wayback machine and test each GET parameter for SQL injection.

Burp Suite extension to crawl JS files in passive mode and display the results on the issues.

A wrapper around grep to avoid typing common patterns.

Tag based conversion tool written in Java implemented as a Burp Suite extension.

Automatic tool for DNS rebinding-based SSRF attacks.

Prevents you from committing secrets and credentials into git repositories.

Generate similar-looking domains for phishing attacks.

Free and open platform for threat hunting, enterprise security monitoring, and log management.

OSINT Framework.

Automated Mass Exploiter.

Enumerate s3 buckets for a specific target.

Add headers to all Burp requests to bypass some WAF products.