Take it like a gift

featured

Exploits found on the INTERNET.

A static security code scanner for Node.js applications.

Identify applications even if they are running on a different port than normal.

An automated S3-compatible bucket inspector.

Just a quick inventory, reminder and launcher for pentest commands.

Find out what websites are Built With.

Weaponized web shell.

Android application identifier for packers, protectors, obfuscators and oddities.

Open source tool for network authentication cracking.

A tool for reverse engineering Android APK files.

Enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP.

A Burp Suite extension made to automate the process of bypassing 403 pages.

Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.

Bug Bounty notes gathered from various sources.

Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates.