Take it like a gift

brutespray
brutespray

Automatically attempts default creds on found services based on Nmap output.

FOCA
FOCA

Tool to find metadata and hidden information in the documents.

Built With
Built With

Find out what websites are Built With.

Caldera
Caldera

Automated adversary emulation platform.

Burp NTLM Challenge Decoder
Burp NTLM Challenge Decoder

Burp extension to decode NTLM SSP headers and extract domain/host information.

Waymore
Waymore

Find way more from the Wayback Machine!

andor
andor

Blind SQL Injection Tool with Golang.

dufflebag
dufflebag

Search exposed EBS volumes for secrets.

BaRMIe
BaRMIe

Enumerating and attacking Java Remote Method Invocation services.

CloudBrute
CloudBrute

Awesome cloud enumerator.

Bypass-403
Bypass-403

A simple script just made for self use for bypassing 403.

DumpsterDiver
DumpsterDiver

Tool to search secrets in various filetypes.

ctf-tools
ctf-tools

Some setup scripts for security research tools.

autoSubTakeover
autoSubTakeover

A tool used to check if a CNAME resolves to the scope address.

Commix
Commix

Automated All-in-One OS Command Injection Exploitation Tool.