Take it like a gift

X-Forwarded-For [403 forbidden] enumeration.

ScriptSentry finds misconfigured and dangerous logon scripts.

Utility for information gathering and penetration testing automation.

Web Application Attack and Audit Framework.

A DNS bruteforcing wordlist generator.

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.

Scrapes public GitHub repositories for common naming conventions in variables, folders and files.

Runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches!

The FLARE team's open-source tool to identify capabilities in executable files.

Never ever ever use pixelation as a redaction technique.

OSINT tool for finding Github repositories by extracting commit logs in real time.

A simple script to screenshot a list of websites.

An asynchronous enumeration & vulnerability scanner.

A Windows potato to privesc.

Patch-level verification for Bundler.