Take it like a gift

Ground control
Ground control

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

goreplay
goreplay

Capture and replay live HTTP traffic in order to continuously test your system with real data.

holehe
holehe

Check if the mail is used on different sites and retrieve informations on sites.

h8mail
h8mail

Powerful and user-friendly password hunting tool.

HTTP Request Smuggler
HTTP Request Smuggler

Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.

waybackurls
waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain.

gitleaks
gitleaks

Protect and discover secrets using Gitleaks.

GitHacker
GitHacker

A Git source leak exploit tool that restores the entire Git repository, including data from stash.

HasMySecretLeaked
HasMySecretLeaked

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

Goby
Goby

Network security technology that achieves rapid security emergency.

Ligolo-ng
Ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

HBSQLI
HBSQLI

Automated tool for testing header based blind SQL injection.

HAITI
HAITI

Hash type identifier.

HackTools
HackTools

The all-in-one browser extension for offensive security professionals.

HEKATOMB
HEKATOMB

Connects to LDAP directory to retrieve all computers and users informations.