Take it like a gift

Framework for monitoring and tampering system API calls of native macOS, iOS and android apps.

Burp Suite plugin to detect current and discover new WSDL files.

DeHashed provides free deep-web scans and protection against credential leaks.

Check for LDAP protections regarding the relay of NTLM authentication.

Helps to bypass antiviruses by providing an encryption wrapper and loader for your shellcode.

Multi-threaded network reconnaissance tool which performs automated enumeration of services.

Collects informations related to domains whois, history, dns records and more.

The all-in-one browser extension for offensive security professionals.

Hash type identifier.

Pull secrets from an AWS environment.

Exploit Kubernetes clusters misconfigurations and be the swiss army knife of your pentests.

Smart context-based SSRF vulnerability scanner.

A simple script just made for self use for bypassing 403.

Network and Web Pentest Automation Framework.

Designed to enable security teams to conduct advanced penetration tests with ease.