Take it like a gift

Try to find the origin IP of a webapp protected by Cloudflare.

All-in-one AWS S3 bucket tool.

Java decompiler, assembler, and disassembler.

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

Automation of tokens/api keys testing.

Totally Automatic LFI Exploiter and Scanner.

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

A fast, simple, recursive content discovery tool written in Rust.

Android application identifier for packers, protectors, obfuscators and oddities.

HackerSploit YouTube channel.

Python script implementing the favicon hash trick to find subdomains.

Password Hunter in active directory.

Enumerate s3 buckets for a specific target.

Tool for automating the search for IDOR vulnerabilities in web applications and APIs.

A tool for reverse engineering Android APK files.