Take it like a gift

Get informations about SSL certificates.

Rapid content discovery tool for recursively querying webservers.

JWT brute force cracker written in C.

Enumerate Google Storage buckets, check the access and if they can be privilege escalated.

Collection of tools for network auditing and penetration testing.

A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

Modular command-line tool to parse, create and manipulate JWT tokens.

Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.

Small and highly portable detection tests based on MITRE's ATT&CK.

Helps to identify IoT related dashboards and scan them for default passwords.

Find endpoints on GitHub.

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.

Series of tools for attacking MS Kerberos implementations.

Go365 performs user enumeration and password guessing attacks on organizations that use Office365.

OSINT tool for finding Github repositories by extracting commit logs in real time.