Take it like a gift

A tool that helps users searching and filtering queries in Ldap environment.

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.

Automate Active Directory Enumeration using PowerView.

Request the public disclosures on a specific HackerOne program.

A fuzzing tool written in Go. It helps your pentesting journey.

A modular multi-language webshell.

SQL injection script for Microsoft SQL Server.

An SSL enabled basic auth credential harvester with a Word document template URL injector.

Scrape LinkedIn without API restrictions for data reconnaissance.

Multiplatform Python webshell.

Combines the speed of masscan with the reliability and detailed enumeration of nmap.

This tool extracts secrets from a pcap file or from a live interface.

Generate tens of thousands of subdomain combinations in a matter of seconds.

A multi-platform fuzzer for poking at userland binaries and servers.

Detect Vulnerable SSRF parameters.