Take it like a gift

A ready to use JSONP endpoints/payloads to help bypass Content Security Policy.

Enumerate and extract GraphQL APIs.

Vulnerability scanner for mass detection of web-based applications vulnerabilities.

Domain name permutation engine written in Go.

Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.

Find broken links, missing images, etc within your HTML.

Helps to bypass antiviruses by providing an encryption wrapper and loader for your shellcode.

Python script implementing the favicon hash trick to find subdomains.

Collects informations related to domains whois, history, dns records and more.

Auto Scanning to SSL Vulnerability.

Monitor GitHub to search and find sensitive data in real time.

A complete TUI for LDAP.

Automating situational awareness for cloud penetration tests.

A Burp Suite extension to find potential endpoints and parameters.

Capture all the git secrets by leveraging multiple open source git searching tools.