Take it like a gift

Web Check
Web Check

All-in-one OSINT tool for analysing any website.

Cake Fuzzer
Cake Fuzzer

Cutting-edge project designed to automate the continuous discovery of vulnerabilities in webapps.

DTD Finder
DTD Finder

List DTDs and generate XXE payloads using those local DTDs.

PEASS-ng
PEASS-ng

Privilege Escalation Awesome Scripts SUITE.

As3nt
As3nt

Another Subdomain ENumeration Tool.

Aranea
Aranea

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

csp-analyzer
csp-analyzer

Analyze Content-Security-Policy header of a given URL.

BackupKiller
BackupKiller

Generate wordlist based on the URLs to check for backup, installation, etc files.

Burp-Encode-IP
Burp-Encode-IP

Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.

qsfuzz
qsfuzz

qsfuzz is a tool that allows to write simple rules in YAML that define what value to inject

lnkbomb
lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

pivotnacci
pivotnacci

A tool to make socks connections through HTTP agents.

msfpc
msfpc

A quick way to generate various basic Meterpreter payloads via MSFvenom.

Powermad
Powermad

PowerShell MachineAccountQuota and DNS exploit tools.

M/o/Vfuscator
M/o/Vfuscator

The single instruction C compiler.