Take it like a gift

Check egress filtering and identify if ports are allowed to automatically spawn a shell.

A Burp Suite extension made to automate the process of bypassing 403 pages.

Collect and maintain internet-wide assets data for public Bug Bounty programs.

Extract subdomains from SSL certificates in HTTPS sites.

Privilege escalation tool for Windows.

Network security scanner with an extensible plugin system.

A Git source leak exploit tool that restores the entire Git repository, including data from stash.

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

Game of Active Directory.

Link a domain with registered organisation names and emails, to other domains.

Capture and replay live HTTP traffic in order to continuously test your system with real data.

Gather all companies acquired by a given company domain name.

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

A fast and minimal JS endpoint extractor.

Utility that detects publicly disclosed vulnerabilities in application dependencies.