Take it like a gift

Cross-platform post-exploitation HTTP/2 Command & Control server and agent.

Fully customizable Windows-based pentesting virtual machine distribution.

A Git source leak exploit tool that restores the entire Git repository, including data from stash.

Designed to streamline the extraction and sanitization of HARTokens from HTTP archives.

CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

Quickly find uncommon shares in vast Windows domains.

Utility to embed XXE and XSS payloads in docx, odt, pptx...

Free and open source network security tool for man-in-the-middle attacks on a LAN.

Burp extension to decode NTLM SSP headers and extract domain/host information.

Finding assets and subdomains from certificates! Scan the web!

ExifTool meta information reader/writer.

Automates the process of detecting and exploiting SQL injection security flaws.

A DNS bruteforcer with multi-threading, and handling of bad resolvers.

Identify routers on the local LAN and paths to the Internet.

Standalone utility for service discovery on open ports!