Take it like a gift

X-Forwarded-For [403 forbidden] enumeration.

RedEye is a visual analytic tool supporting Red & Blue Team operations.

A password spraying tool for Microsoft Online accounts (Azure/O365).

A static security code scanner for Node.js applications.

Brute discover GET and POST parameters.

O365 user enumeration and password spraying tool.

Visualize a packet capture offline as a network diagram including device identification.

Find subdomains by searching public certificate records.

Evaluate user privileges in web applications across a list of URLs.

A simple SSRF-testing sheriff written in Go.

Active web application security reconnaissance tool.

An open source tool focused on software supply chain security.

Vulnerability scanner which aims to support the entire vulnerability management lifecycle.

Burp History parsing tool to discover potential SQL injection points.

Dump users's .plist on a Mac OS system and to convert them into a crackable hash.