Take it like a gift

Tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable.

Find exploits in local and online databases instantly.

Black box fuzzer for web applications.

Scope gathering tool for multiple Bug Bounty platforms.

Utility to embed XXE and XSS payloads in docx, odt, pptx...

Totally Automatic LFI Exploiter and Scanner.

Burp extension to decode NTLM SSP headers and extract domain/host information.

A tool that helps users searching and filtering queries in Ldap environment.

Generate wordlists of passwords containing cities at a defined distance around the client city.

Use favicon.ico to improve your target recon phase.

Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.

ExifTool meta information reader/writer.

All In One Web Recon.

Modular command-line tool to parse, create and manipulate JWT tokens.

Create a copy of a targeted website with CDN and WAF restrictions disabled.