Take it like a gift

A pentest reporting tool.

Post-exploitation framework designed to assist with lateral movement within Active Directory.

Provides view with filtering capabilities for all requests from all Burp Suite tools.

A comprehensive scanner for Google Cloud.

Simple python script to check against hypothetical JWT vulnerability.

Open-source phishing toolkit.

Tools to work with android .dex and java .class files.

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

Basically a regexp over a GitHub search.

A simple certificate expiration monitor script.

An intentionally vulnerable web API game for learning and training purposes.

Search for buckets and URL shorteners.

Software reverse engineering (SRE) framework.

A vulnerability scanner for container images and filesystems.

Public malware techniques used in the wild: virtual machine, emulation, debuggers.