Take it like a gift

Cli tool for Exploit-DB that also allows you to take a copy of Exploit Database with you.

Vulnerable application with a web service and an API.

Static analysis framework built in house to do security vetting for Android applications.

Pwn a bastion webserver and create SOCKS proxies through the DMZ.

A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

Get informations about SSL certificates.

Know the dangers of credential reuse attacks.

The single instruction C compiler.

Check for backup artifacts that may disclose the web-application's source code.

A handy SMB enumeration tool.

wpfinger is a red-team WordPress scanning tool.

Scrape domain names from SSL certificates of arbitrary hosts.

Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.

A list of Windows kernel exploits.