Take it like a gift

Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.

Automatic Linux privilege escalation via exploitation of low-hanging fruit.

CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

Fast web spider written in Go.

Making favicon.ico based recon great again.

Obfuscation script designed to bypass AMSI and commercial antivirus solution.

A Burp Suite extension that checks for the HTTPoxy vulnerability.

Automatically coerce a Windows server to authenticate on an arbitrary machine.

A tool for reverse engineering Android APK files.

NoSql Injection CLI tool for finding vulnerable websites using MongoDB.

A CLI tool to extract server certificates.

Offensive Security Youtube channel.

Scan networks searching for NetBIOS information.

A list of DNS providers and how to claim (sub)domains via missing hosted zones.

Identify routers on the local LAN and paths to the Internet.