Take it like a gift

sponsor

Enumerate valid subdomains using active bruteforce and DNS resolution.

Generate emails and usernames.

Cli tool for Exploit-DB that also allows you to take a copy of Exploit Database with you.

Free web-application vulnerability and version scanner.

A PowerShell Post-Exploitation Framework.

A PostMessage fuzzing extension for Chrome.

Virtual machine for adversary emulation and threat hunting.

Tool to help exploit XXE vulnerabilities.

Automatic SSTI detection tool with interactive interface.

Automatic Linux privilege escalation via exploitation of low-hanging fruit.

Subdomain takeover vulnerability checker.

A social media enumeration & correlation tool.

Pastebin OSINT harvester.

Collection of Windows print spooler exploits and other utilities for practical exploitation.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.