Take it like a gift

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Capture and replay live HTTP traffic in order to continuously test your system with real data.

Check if the mail is used on different sites and retrieve informations on sites.

Powerful and user-friendly password hunting tool.

Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.

Fetch all the URLs that the Wayback Machine knows about for a domain.

Protect and discover secrets using Gitleaks.

A Git source leak exploit tool that restores the entire Git repository, including data from stash.

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

Network security technology that achieves rapid security emergency.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Automated tool for testing header based blind SQL injection.

Hash type identifier.

The all-in-one browser extension for offensive security professionals.

Connects to LDAP directory to retrieve all computers and users informations.