Take it like a gift

A multi-threaded scanner that helps identify CORS flaws/misconfigurations.

Collection of malware source code for a variety of platforms in an array of different programming la.

A CLI tool to extract server certificates.

Morphing Cobalt Strike's evil.HTA.

Burp Suite extension which injects non-invasive headers to reveal backend systems.

Chrome extension that finds DOM based XSS vulnerabilities.

A modern experience for GDB with advanced debugging capabilities.

Checks expired domains to determine good candidates for phishing and C2 domain names.

A python script that finds endpoints in JavaScript files.

Cloud Security Posture Management (CSPM).

Fetch many paths for many hosts, without killing the hosts.

A little toolbox to play with Microsoft Kerberos in C.

Generate emails and usernames.

Hacks its way into RTSP videosurveillance cameras.

A social media enumeration & correlation tool.