Take it like a gift

Pentest report generator.

Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.

Post-exploitation and adversary emulation framework that is used to aid Red Teams and pentesters.

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

Web security scanner.

Platform security assessment framework.

Self contained web shells and other attacks via .htaccess files.

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

Small tool to capture packets from wlan devices.

Scrape domain names from SSL certificates of arbitrary hosts.

A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.

HTTP-traceroute in Go.

Hex editor for reverse engineers, programmers and people who value their retinas when working at 3am.

A fast and minimal JS endpoint extractor.

Generates wordlists from the Burp sitemap.