Generates payloads that exploit unsafe Java object deserialization.
Gives root access on remote docker containers that expose their APIs.
Track activity and actions on your network.
Damn Vulnerable Web Application.
Web debugging proxy for MacOS, Windows, and Linux.
Self contained web shells and other attacks via .htaccess files.
Automatically brute force all services running on a target.
Database protection suite with field level encryption and intrusion detection.
Site fast fuzzing with chorme extension.
A python script to help red teamers discover KeePass instances and extract secrets.
A DNS reconnaissance tool for locating non-contiguous IP space.
Damn vulnerable cloud application.
The only cheat sheet you need.
Active Directory certificate abuse.
A customized command and control center for red team and adversary simulation.
