Take it like a gift

MagicRecon
MagicRecon

A powerful shell script to maximize the recon and data collection process.

Burp NTLM Challenge Decoder
Burp NTLM Challenge Decoder

Burp extension to decode NTLM SSP headers and extract domain/host information.

DripLoader
DripLoader

Evasive shellcode loader for bypassing injection detection.

FiercePhish
FiercePhish

Full-fledged phishing framework to manage all phishing engagements.

ADenum
ADenum

Find misconfiguration through LDAP to exploit weaknesses with Kerberos.

BetterBackdoor
BetterBackdoor

A backdoor with a multitude of features.

Arsenal
Arsenal

Just a quick inventory, reminder and launcher for pentest commands.

Acra
Acra

Database protection suite with field level encryption and intrusion detection.

Bug Bounty Reports Explained
Bug Bounty Reports Explained

Bug Bounty Reports Explained channel.

certs.io
certs.io

Search the entire internet by data in TLS certificates.

cvecrowd.com
cvecrowd.com

Lists CVEs that are currently being discussed on the social network Mastodon.

csrf-scanner
csrf-scanner

CSRF Scanner Extension for Burp Suite Pro.

csp-analyzer
csp-analyzer

Analyze Content-Security-Policy header of a given URL.

Core Impact
Core Impact

Designed to enable security teams to conduct advanced penetration tests with ease.

airbash
airbash

Fully automated WPA PSK PMKID and handshake capture script.