TurvSec

flareprox. Use Cloudflare to create HTTP pass-through proxies for unique IP rotation, similar to fireprox

Burp2API. Converting your Burp Suite projects into JSON APIs which can be viewed with Swagger editor or imported into Postman.

GotMeta. A Python tool for discovering, downloading, and extracting metadata from publicly available files on target domains. Useful for OSINT.

allthewayback. Search the Wayback Machine for specific historical files which may contain sensitive data.

PluggedIn. A Chromium-based browser OSINT extension that extracts employee names from LinkedIn company pages and generates username lists in multiple formats.

FastWGvpn. FastWGvpn rapidly provides a WireGuard VPN hosted in AWS. Great for RedTeam operations or general internet usage under a new IP Address.

slipstream. A file transfer / data exfiltration web application used to bypass web proxies by using Cloudflared

swagscoper. Uses a Swagger API URL and outputs the number of HTTP methods. For use with the security assessment scoping process.

temp2fa. A simple way to store and use your temporary 2fa codes on Windows and Linux

Thicc. Thicc is a useful tool to aid non-proxy-aware thick application assessments. It will find the applications external IP addresses and then use them to generate BurpSuite settings to avoid a lot of messing around.

TraverseCheck. Check for path traversal issues in URL Paths and Query parameters. Supports dynamic generation of both Linux and Windows payloads.