Exploitation

Automatic SQL injection and database takeover

Advanced SQL injection detection tool

Automated NoSQL database exploitation tool

NoSQL injection CLI tool for MongoDB

Parameter analysis and XSS scanner

Advanced XSS detection suite

Find reflected input parameters for XSS

Detect and manage blind XSS vulnerabilities

Easy blind cross-site scripting testing

DOM XSS scanner for Single Page Applications

Automated OS command injection exploiter

Automatic SSRF fuzzer and exploitation tool

Generate Gopher payloads for SSRF

Automated SSRF finder with XSS and redirect checks

DNS rebinding attack framework

CORS misconfiguration scanner

Simple CORS misconfiguration scanner

Cross Origin Resource Sharing scanner

Fast CRLF vulnerability scanner in Go

Fast CRLF injection scanner

Prime CSRF audit and exploitation toolkit

The directory traversal fuzzer

File inclusion & directory traversal tool

Local file inclusion exploitation tool

Automatic LFI exploiter and scanner

Burp extension for GraphQL security testing

GraphQL endpoint pentesting engine

Obtain GraphQL schema despite disabled introspection

Java deserialization exploit payload generator

PHP unserialize() payload generator

.NET deserialization payload generator

Open redirection analyzer

Fuzzer for open redirect issues

Burp extension for high-speed request sending

Race condition exploitation framework

Python library for exploiting race conditions

HTTP request smuggling and desync testing

HTTP/2 cleartext request smuggling

Automatic XXE exploitation via OOB methods

Find DTDs and generate XXE payloads

Embed XXE/XSS payloads in Office documents