Take it like a gift

A curated list of bugbounty writeups (Bug type wise).

OWASP Joomla Vulnerability Scanner Project.

Feed it a list of subdomains, it will resolve them and tell you which ones are internal.

Link a domain with registered organisation names and emails, to other domains.

Android and Java bytecode viewer.

Android application identifier for packers, protectors, obfuscators and oddities.

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

CRLFMap is a tool to find HTTP Splitting vulnerabilities.

Public malware techniques used in the wild: virtual machine, emulation, debuggers.

JSON Web Tokens Support for Burp Suite.

This is a python wrapper around the amazing KNOXSS.

Bypass client-side encryption using custom logic for testing with Python and NodeJS.

Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.

Obfuscation script designed to bypass AMSI and commercial antivirus solution.

Phishing Campaign Toolkit.