Take it like a gift

Cross-platform command & control server and agent focused on containerized environments.

A Firefox/Burp Suite extension that provide usefull tools for your security audit.

An automated S3-compatible bucket inspector.

CORS Misconfiguration Scanner.

Command-line WebDAV client.

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

Burp extension to decode NTLM SSP headers and extract domain/host information.

Add headers to all Burp requests to bypass some WAF products.

Automated Security Testing For REST API's.

Create a copy of a targeted website with CDN and WAF restrictions disabled.

Post-exploitation framework designed to assist with lateral movement within Active Directory.

A list of services and how to claim (sub)domains with dangling DNS records.

Find domains and subdomains related to a given domain.

A tool for reverse engineering Android APK files.