Take it like a gift

Image metadata library and tools.

Domain user enumeration tool.

Game of Active Directory.

Cutting-edge project designed to automate the continuous discovery of vulnerabilities in webapps.

The new generation of wmiexec.py with all operations performed on port 135 for antivirus evasion.

Extract and list API routes from Swagger files in YAML/JSON format.

Search for buckets and URL shorteners.

Powerful open source XSS scanning tool and parameter analyzer.

Escalate a Cross-Site Scripting vulnerability to Remote Code Execution in WordPress.

Opensource, cross-platform C2 and post-exploitation framework written in python and C.

Denial of Service Toolkit.

Filter and enrich a list of subdomains by level.

A fast and minimal JS endpoint extractor.

The perils of the pre-Windows 2000 compatible access group in a Windows domain.

LSASS memory dumper using direct system calls and API unhooking.