Take it like a gift

featured

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

Memory Backed Powershell WebDav Server.

This is a python wrapper around the amazing KNOXSS.

Free Flash decompiler.

Subdomains enumeration tool for penetration testers.

Fetches JavaScript files quickly and comprehensively from a defined list of URLs or domains.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

S3 bucket finder from html,js and bucket misconfiguration testing tool.

Highly configurable script for dictionary/spray attacks against online web applications.

Java application for automatic SQL database injection.

Find out what websites are Built With.

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities.

Find vulnerabilities, compliance issues and infrastructure misconfigurations in your IAC.

Beacon Object Files for Kerberos abuse.

John Hammond YouTube channel.