Take it like a gift

sponsor

Collect and maintain internet-wide assets data for public Bug Bounty programs.

A project for fuzzing HTTP/1.1 CL.0 Request Smuggling attack vectors.

This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Vulnerable by design AWS deployment tool.

Uncover the true IP address of websites safeguarded by Cloudflare & others.

Simple latest CVE collector written in Python.

Awesome cloud enumerator.

Prevent cloud misconfigurations and find vulnerabilities during build-time.

A multi-threaded scanner that helps identify CORS flaws/misconfigurations.

Interactive CTF exploration tool.

The only cheat sheet you need.

CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

Platform security assessment framework.

Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.