Take it like a gift

Morphing Cobalt Strike's evil.HTA.

HTTP Request Smuggling Detection Tool.

A tool for testing for certificate validation vulnerabilities of TLS connections.

Cross-platform command & control server and agent focused on containerized environments.

A tool to scan source code for DOM based XSS vulnerabilities.

A Windows potato to privesc.

Generate wordlists of passwords containing cities at a defined distance around the client city.

Authenticated SSRF in Grafana.

A curated list of free courses & certifications.

A framework including all the tools that work on Windows.

Automated adversary emulation platform.

Awesome cloud enumerator.

PortSwigger XSS cheat sheet that contains many vectors that can help you bypass WAFs and filters.

Tool that tests MANY url bypasses to reach a 40X protected page.

An OSINT tool to investigate GitHub profiles.