Hunt down social media accounts by username across social networks.
A project for fuzzing HTTP/1.1 CL.0 Request Smuggling attack vectors.
Turns any junk text into a usable wordlist for brute-forcing.
Enumerating and attacking Java Remote Method Invocation services.
Advanced fuzzing librar. Slot your fuzzers together and extend their features using Rust.
Analyze the security headers returned by a web page and report dangerous configurations.
Find secrets, paths or links in the source code.
Enumerate an Active Directory environment with LDAP queries.
Tool for automating the search for IDOR vulnerabilities in web applications and APIs.
Rip web accessible version control systems: svn, git...
Simple JWT token brute force cracker.
Informative site with EoL dates of everything.
Modern tool for Windows kernel exploration and tracing with a focus on security.
Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.
Create vulnerable instrumented local or cloud environments to simulate attacks.