A free toolkit for manually testing web applications, providing capabilities for intercepting, inspecting, modifying, and replaying HTTP requests and responses during security testing.

A globally accessible knowledge base mapping real-world adversary behavior into tactics, techniques, and procedures used to understand and analyze cyber threats.