Take it like a gift

Enumerate an Active Directory environment with LDAP queries.

A toolkit for testing, tweaking and cracking JSON Web Tokens.

Analyze the security headers returned by a web page and report dangerous configurations.

Crawl a site and extract useful informations for recon.

Powershell tool to automate Active Directory enumeration.

Race Condition framework.

Discover and fingerprint IKE hosts.

Standalone script to enumerate SUID binaries, separate default binaries from customs.

A ready to use JSONP endpoints/payloads to help bypass Content Security Policy.

CORS misconfiguration scanner tool with speed and precision in mind!

Active web application security reconnaissance tool.

Burp Suite extension that allows request/response modification using a GUI.

Collect, categorize and highlight requests and/or responses according to their content.

A burpsuite extension to find security reports published on HackerOne based on the selected host.

A PowerShell tool heavily inspired by the popular tool CrackMapExec/NetExec.