Take it like a gift

Open-source penetration testing tool that automates the process of exploiting XSS.

Detect Vulnerable SSRF parameters.

Find exploits in local and online databases instantly.

Monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Threat framework to research security gaps in GraphQL implementations.

Monitoring your Slack workspaces for sensitive informations.

Utility for information gathering and penetration testing automation.

Python script implementing the favicon hash trick to find subdomains.

Web Application Security Scanner Framework.

Powershell tool to automate Active Directory enumeration.

E-mails, subdomains and names Harvester.

Burp Suite extension to help make Graphql request more readable.

Toolkit to detect and keep track on Blind XSS, XXE & SSRF.

The AWS Cloud Post Exploitation framework!

UI-based tool with multiple techniques for attacking and enumerating Azure and AWS environment.