Take it like a gift

featured

Damn vulnerable cloud application.

Try to find all subdomains, similar-domains and related-domains of an organization.

A wrapper around grep to avoid typing common patterns.

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

Capture and replay live HTTP traffic in order to continuously test your system with real data.

Find vulnerabilities, compliance issues and infrastructure misconfigurations in your IAC.

Web path scanner.

A dynamic reverse engineering toolkit.

Check egress filtering and identify if ports are allowed to automatically spawn a shell.

Search exposed EBS volumes for secrets.

Burp Suite extension which injects non-invasive headers to reveal backend systems.

Vulnerability scanner for mass detection of web-based applications vulnerabilities.

Combination of evilginx3 and GoPhish.

Open source sulnerability management and orchestration platform.

Quickly do keyword searches over GitLab and GitHub for OSINT & bug bounty recon.