Take it like a gift

featured

String-based secret-searching tool, high entropy and regexes.

Dex to Java decompiler.

Burp Suite Extension to hunt for common vulnerabilities found in websites.

A list of useful payloads and bypass for Web Application Security.

Detects the use of JavaScript libraries with known vulnerabilities.

A Chrome Extension to track postMessage usage (url, domain and stack).

Automated NoSQL database enumeration and web application exploitation tool.

Generate tens of thousands of subdomain combinations in a matter of seconds.

Powershell payload generator In Bash !

A light-weight first-stage C2 implant written in Nim.

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.

Searches for publicly available files hosted on various websites for a particular domain.

The perils of the pre-Windows 2000 compatible access group in a Windows domain.

Collect a dossier on a person by username from thousands of sites.

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic.