Take it like a gift

Detect Vulnerable SSRF parameters.

Go365 performs user enumeration and password guessing attacks on organizations that use Office365.

A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

Extends Burp Suite's active and passive scanning capabilities.

DNS asynchronous brute force utility.

Small and highly portable detection tests based on MITRE's ATT&CK.

The ultimate Vulnerability Disclosure Policy and Bug Bounty list!

A modern experience for GDB with advanced debugging capabilities.

Advanced discovery of Privileged Accounts, includes Shadow Admins.

Data exfiltration over DNS request covert channel.

Fast and simple-to-use open-source/cross-platform network scanner.

Bash script which checks and validates for leaked credentials.

Lateral movement graph for Azure Active Directory.

A modular multi-language webshell.

A Windows potato to privesc.