YesWeBurp is a Burp Suite extension that gives you access to all your YesWeHack Bug Bounty Programs from within Burp. Configure Burp according to the public and private programs you are participating in by adding scopes and defining User-Agents.

Dom-Explorer is a web-based tool for testing various HTML parsers and sanitisers – potentially leading to mutation XSS. Supported sanitisers include Ammonia, Angular, DomPurify, JsXss and SafeValues; parsers include DomParser, Parse5, srcdocParser and TemplateParser. Pipelines can chain multiple parsers to visualize, step by step, the transformation of HTML. Pipelines can be shared, embedded into websites, saved/reused, and synchronised across multiple browser tabs in real-time.

The Pwning Machine helps hunters navigate complex modern web services in the privacy-preserving way demanded by some Bug Bounty Programs. This customizable, extensible suite of tools provides an ideal environment for testing complex exploits in a world of containers and microservices. A Docker-based environment can be set up on a dedicated server in less than 10 minutes.

XSStools is a cross-site scripting (XSS) development framework that simplifies the crafting of XSS payloads. Generate powerful payloads quickly with the payload generator, and use one of many available wrappers without the need for encoding. You also need only supply the targeted element to write clickjacking code – a usually tiresome task. A collection of exfiltrators is included.