Take it like a gift

The offensive manual web application penetration testing framework.

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

CMS Detection and Exploitation suite that supports over 180 other CMSs.

Enumerating and attacking Java Remote Method Invocation services.

Injects custom XSS payloads on every form/request submitted to detect blind XSS.

A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.

Stealth redirector for your red team operation security.

Wordlists handcrafted and automated with <3

The Swiss Army knife for WiFi, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Search Bug Bounty writeups easily.

403/401 Bypass Methods.

Discover Adobe Experience Manager (AEM) Content Management System (CMS) websites.

All in one recon tool for bug bounty.

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.