Take it like a gift

An advanced Cross Site Scripting vulnerability detection and exploitation framework.

Burp Suite extension for application pentest to write test cases and map flows and vulnerabilities.

All the XSS cheatsheet data to allow contributions from the community.

Find AWS S3 buckets and test their permissions.

Burp Suite extension to create target specific and tailored wordlist from burp history.

A self-hosted WAF to protect web applications from cyber attacks.

Opensource, cross-platform C2 and post-exploitation framework written in python and C.

Performs security oriented safety checks relevant from offensive/defensive security perspectives.

Scrape LinkedIn without API restrictions for data reconnaissance.

Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces.

Bypass for PowerShell Constrained Language Mode.

Publicly open storage viewer.

Rust-based high performance domain permutation generator.

Retrieve information via O365 and AzureAD with valid credentials.

Unprivileged Linux process snooping.