Take it like a gift
goreplay
Capture and replay live HTTP traffic in order to continuously test your system with real data.
egressbuster
Check egress filtering and identify if ports are allowed to automatically spawn a shell.
Collaborator Everywhere
Burp Suite extension which injects non-invasive headers to reveal backend systems.