Take it like a gift

featured

Enumerate data from Windows and Samba hosts.

Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.

Game of Active Directory.

Offensive PowerShell for red team, penetration testing and offensive security.

Standalone utility for service discovery on open ports!

A free and open source Ruby toolkit for security research and development.

A (partial) Python rewriting of PowerSploit's PowerView.

A Powerful Subdomain Takeover Tool.

A fast passive subdomain enumeration tool that uses various sources to gather data.

Unix binaries that can be used to bypass local security restrictions in misconfigured systems.

Tool to help exploit XXE vulnerabilities.

May be used to extract various credentials from running processes.

Automated brute-forcing attack tool.

Sub domain wild card filtering tool.

Scans for different types of XSS on a list of urls.