A pentesting tool that dumps the source code from .git even when the directory traversal is disabled

Parse .nessus file(s) and shows output in interactive UI

Continuously checks the availability of an endpoint, or a list of endpoints. Expected response code and/or response strings can be set to fine-tune the results.

A set of detection rules shared with the community.

Burp Plugin to decrypt AES encrypted traffic on the fly

Projects for AWS ThreatHunting

A colorful cross-platform python script to test misconfigurations of AWS S3 buckets both through authenticated and unauthenticated checks!

Burpsuite Plugin to bypass strict RePlay protection