Take it like a gift

The volatile memory extraction framework.

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Uses data from SSL Certificates to find potential host names.

Customisable and automated HTTP header injection.

Simple latest CVE collector written in Python.

Filesystem analysis tool/directory looking for interesting stuff.

Post-exploitation framework designed to assist with lateral movement within Active Directory.

The all-in-one browser extension for offensive security professionals.

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

Blazing-fast tool to grab screenshots of your domain list right from terminal.

JWT brute force cracker written in C.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

HTTP Request Smuggling Detection Tool.

HTTP 403 bypass tool.

Burp Suite extension for dynamic payload generation to detect injection flaws.