Take it like a gift

Python utility to takeover domains vulnerable to AWS NS Takeover.

Extract subdomains from SSL certificates in HTTPS sites.

Find misconfiguration through LDAP to exploit weaknesses with Kerberos.

The all-in-one browser extension for offensive security professionals.

Perform automated network reconnaissance scans to gather network intelligence.

List of awesome CobaltStrike resources.

Generates combination of domain names from the provided input.

API key/token exploitation made easy.

Data exfiltration over DNS request covert channel.

A fun, free platform for learning modern cryptography.

bXSS is a utility which can be used identify Blind Cross-Site Scripting.

Zip password cracker.

Scope gathering tool for multiple Bug Bounty platforms.

Check for dozens of common best-practices around deploying Docker containers in production.

CRLFMap is a tool to find HTTP Splitting vulnerabilities.