Take it like a gift

Burp Suite plugin to detect current and discover new WSDL files.

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.

Simple tool to scan large scope and provide SSL/TLS vulnerabilities.

Enumerate an Active Directory environment with LDAP queries.

Generates DNS wordlists through permutations.

Detect misconfigurations and security risks across GitHub and GitLab assets.

A free class for web security.

Enumerate s3 buckets for a specific target.

Extract subdomains from SSL certificates in HTTPS sites.

Online XSS tool with demonstration of vulnerability.

Whois command implemented by golang with awesome whois servers list.

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

Another Subdomain ENumeration Tool.

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

Cloud resources manager designed to analyze and manage cloud cost, usage, security, and more!.