Take it like a gift

Small and highly portable detection tests based on MITRE's ATT&CK.

Enumerate users, groups and computers from a Windows domain through LDAP queries.

The Deepfake Offensive Toolkit.

Recovers passwords from pixelized screenshots.

Standalone utility for service discovery on open ports!

Check egress filtering and identify if ports are allowed to automatically spawn a shell.

A Burp Suite content discovery plugin that add the smart into the Buster.

A web app for encryption, encoding, compression and data analysis.

A multitool for tracking and locating nearby devices via their RF activities.

Leverage ASN to look up IP addresses owned by a specific organization.

Data exfiltration over DNS request covert channel.

Damn vulnerable cloud application.

Find out what websites are Built With.

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

Cloud native runtime security.