Take it like a gift

Damn vulnerable cloud application.

An automated SSRF finder. Just give the domain name and your server and chill!

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

Find origin servers of websites behind Cloudflare by using Internet-wide scan data from Censys.

Vulnerability static analysis for containers.

Yet another subdomain finder.

Obfuscation script designed to bypass AMSI and commercial antivirus solution.

Collection of Nuclei templates dedicated to WordPress core, plugins and themes vulnerabilities.

Incredibly fast crawler designed for OSINT.

Scan your code for security misconfiguration, search for passwords and secrets.

A simple CORS misconfiguration scanner.

Divide full port scan results and use it for targeted Nmap runs.

Analyze Content-Security-Policy header of a given URL.

Pwn a bastion webserver and create SOCKS proxies through the DMZ.

Know the dangers of credential reuse attacks.