Take it like a gift

Discover the origin host behind a reverse proxy, useful for bypassing cloud WAFs!.

Browser fingerprinting library.

A Burp Suite extension to extract data from source code while browsing.

Go365 performs user enumeration and password guessing attacks on organizations that use Office365.

A Burp Suite extension made to automate the process of bypassing 403 pages.

A comprehensive OS command injection payload generator.

Written by Black Hat Ethical Hacking and #ChatGPT for offensive security and XSS attacks.

A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.

Extension of sublister tool to check for subdomain takeovers.

Twitter scraping & OSINT tool allowing you to scrape a user's followers, following, tweets and more.

A Burp Suite extension to find potential endpoints and parameters.

Software reverse engineering (SRE) framework.

Game of Active Directory.

DS_Store file parser/viewer.

Find domains and subdomains related to a given domain.