Take it like a gift

Manage your threat intelligence at scale.

Subdomain takeover vulnerability checker.

Find secrets and passwords in container images and file systems.

Scripted Local Linux Enumeration & Privilege Escalation Checks.

Burp Suite extension to help make Graphql request more readable.

An HTTP Request Smuggling / Desync testing tool.

Monitoring your Slack workspaces for sensitive informations.

Remote administration tool for Windows.

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

Attack clients through file content swapping and compromise any data passed in cleartext.

Try to find all subdomains, similar-domains and related-domains of an organization.

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

A Tool for Domain Flyovers.

A ready to use JSONP endpoints/payloads to help bypass Content Security Policy.

Performing SQLInjection test on Burp Suite Bulk Requests using SQLMap.