Take it like a gift

featured

Prototype Pollution exploits collection.

CORS Misconfiguration Scanner.

Yar is a tool for plunderin' organizations, users and/or repositories...

Scan your code for security misconfiguration, search for passwords and secrets.

Collects informations related to domains whois, history, dns records and more.

The unix-way web crawler.

RedEye is a visual analytic tool supporting Red & Blue Team operations.

The Email OSINT tool.

Common User Passwords Profiler.

Some setup scripts for security research tools.

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

Command line tool for testing CRLF injection on a list of domains.

Prototype pollution scanner using headless chrome.

Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces.

A PowerShell Post-Exploitation Framework.