Control Your Infrastructure, Scale Your Scanning—On Your Terms. Easily distribute arbitrary binaries and scripts using any of our eight supported cloud providers!

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

🔥 Web-application firewalls (WAFs) from security standpoint.

Returns old TweetDeck, for free!

Simple and flexible tool for managing secrets

A tool to fastly get all javascript sources/files

Quick SQLMap Tamper Suggester

Unleash the power of cloud

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

A tool for studying JavaScript malware.

Burp plugin able to find reflected XSS on page in real-time while browsing on site

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Web Application Security Testing Tools

Automation for internal Windows Penetrationtest / AD-Security

Adds a customizable "Send to..."-context-menu to your BurpSuite.

Heuristic Vulnerable Parameter Scanner

Hidden parameters discovery suite

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

An interactive cheatsheet tool for the command-line

Enumerate old versions of robots.txt paths using Wayback Machine for content discovery

Automated & Manual Wordlists provided by Assetnote

Web path scanner

CT Log Scanner

De-clutter a list of URLs

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, co…

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List