Take it like a gift

XSS'OR
XSS'OR

Hack with JavaScript.

Damn Vulnerable RESTaurant
Damn Vulnerable RESTaurant

An intentionally vulnerable web API game for learning and training purposes.

graphw00f
graphw00f

GraphQL Server Engine Fingerprinting utility for software security professionals.

CloudGoat
CloudGoat

Vulnerable by design AWS deployment tool.

Faraday security
Faraday security

Open source sulnerability management and orchestration platform.

Fierce
Fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

bbrf
bbrf

Help you coordinate your reconnaissance workflows across multiple devices.

GitFive
GitFive

An OSINT tool to investigate GitHub profiles.

changeme
changeme

A default credential scanner.

CUPP
CUPP

Common User Passwords Profiler.

Findomain
Findomain

The complete solution for domain recognition.

avet
avet

AntiVirus Evasion Tool.

Fresh Resolvers
Fresh Resolvers

List of fresh DNS resolvers updated every 12h.

gitleaks
gitleaks

Protect and discover secrets using Gitleaks.

FiercePhish
FiercePhish

Full-fledged phishing framework to manage all phishing engagements.