Take it like a gift

Detect Vulnerable SSRF parameters.

Stalk your friends on social media using image recognition and reverse image search.

Simple python script to check against hypothetical JWT vulnerability.

A powerful network scanner, DNS recon, subdomain enumeration and IP Geolocator tool powered by GPT.

Capture and replay live HTTP traffic in order to continuously test your system with real data.

Represent any GraphQL API as an interactive graph.

Remote capture for all capture types over TCP sockets or websockets.

Ruby script to bruteforce for AWS s3 buckets using different permutations.

Totally Automatic LFI Exploiter and Scanner.

Adaption of tomnomnom's kxss tool with a different output format.

The ultimate WinRM shell for hacking/pentesting.

Graphql introspection query analyzer.

Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.

Ultimate domain enumeration tool.

Searches code from over a half million public repositories on GitHub.