Take it like a gift

Python tool to remotely extract credentials on a set of hosts.

Scans the top 500 sites daily for their security.txt file or DNS records.

Find subdomains on GitHub.

JWT encoding/decoding, generates payloads for JWT attack and very fast cracking.

Find misconfiguration through LDAP to exploit weaknesses with Kerberos.

Burp Suite extension which injects non-invasive headers to reveal backend systems.

Database protection suite with field level encryption and intrusion detection.

Static analysis framework built in house to do security vetting for Android applications.

A free class for web security.

Find exploits in local and online databases instantly.

403/401 Bypass Methods.

Android remote administration tool.

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

Highly configurable script for dictionary/spray attacks against online web applications.

S3 bucket finder from html,js and bucket misconfiguration testing tool.