Take it like a gift

Extract endpoints from APK files.

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Checks expired domains to determine good candidates for phishing and C2 domain names.

Memory Backed Powershell WebDav Server.

Network attack tool.

A modular multi-language webshell.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

Public malware techniques used in the wild: virtual machine, emulation, debuggers.

Discover and fingerprint IKE hosts.

Email OSINT.

Discover Adobe Experience Manager (AEM) Content Management System (CMS) websites.

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute.

Manage Burp Suite certificate in Android to redirect all traffic to Burp Suite.

Fully automated WPA PSK PMKID and handshake capture script.

The Swiss Army knife for automated Web Application Testing