Take it like a gift

All in one recon tool that just get a single domain name and do all of the work alone.

Finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.

Vulnerable by design cluster environment to learn and practice Kubernetes security.

OSINT tool for finding Github repositories by extracting commit logs in real time.

Generates permutations, alterations and mutations of subdomains and then resolves them.

Gives root access on remote docker containers that expose their APIs.

Collects informations related to domains whois, history, dns records and more.

A backdoor with a multitude of features.

Sensitive data detection tool capable of scanning source code repositories.

HTTP Request Smuggling Detection Tool.

Identify applications even if they are running on a different port than normal.

Advanced AWS access credentials scanner.

Static analysis framework built in house to do security vetting for Android applications.

differer finds how URLs are parsed by different languages in order to help bug hunters break filters.

Dex to Java decompiler.