Take it like a gift

Chaos
sponsor
Chaos

Collect and maintain internet-wide assets data for public Bug Bounty programs.

RecurseBuster
RecurseBuster

Rapid content discovery tool for recursively querying webservers.

cloudflare-origin-ip
cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

godap
godap

A complete TUI for LDAP.

BurpBounty
BurpBounty

Improve the active and passive Burp Suite scanner by means of custom rules through GUI.

angularjs-csti-scanner
angularjs-csti-scanner

Automated client-side template injection detection for AngularJS.

Chimera
Chimera

Obfuscation script designed to bypass AMSI and commercial antivirus solution.

commit-stream
commit-stream

OSINT tool for finding Github repositories by extracting commit logs in real time.

HTSHELLS
HTSHELLS

Self contained web shells and other attacks via .htaccess files.

Gorsair
Gorsair

Gives root access on remote docker containers that expose their APIs.

DeHashed
DeHashed

DeHashed provides free deep-web scans and protection against credential leaks.

ASNLookup
ASNLookup

Leverage ASN to look up IP addresses owned by a specific organization.

HTTP-traceroute
HTTP-traceroute

HTTP-traceroute in Go.

ConfuserEx
ConfuserEx

An open-source, free protector for .NET applications.

attack_range
attack_range

Create vulnerable instrumented local or cloud environments to simulate attacks.