Take it like a gift

Tool to search secrets in various filetypes.

A mini webserver with FTP support for XXE payloads.

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

NodeJS deserialization payload generator.

Scan Wordpress, Drupal, Joomla, vBulletin websites for security issues.

Leverage ASN to look up IP addresses owned by a specific organization.

An automated S3-compatible bucket inspector.

Phishing Campaign Toolkit.

Bash script which checks and validates for leaked credentials.

LinkedIn enumeration tool to get employee names from an organization using scraping.

The AWS Cloud Post Exploitation framework!

Test your knowledge on cyber security and practice for industry recognised certifications.

Help you coordinate your reconnaissance workflows across multiple devices.

Totally Automatic LFI Exploiter and Scanner.

Advanced discovery of Privileged Accounts, includes Shadow Admins.