Take it like a gift

A list of DNS providers and how to claim (sub)domains via missing hosted zones.

The most advance set of Content Security Policy tools.

The pattern matching swiss knife for malware researchers.

Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.

A simple script just made for self use for bypassing 403.

Yet another subdomain finder.

Help you coordinate your reconnaissance workflows across multiple devices.

Bug Bounty Reports Explained channel.

Automated firmware analysis tool for composition analysis and vulnerability scanning.

The leading security assessment framework for Android.

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.

An extremely buggy web application!.

Tool written in Python simply to find XSS vulnerabilities in web application.

Assessment tool that allows penetration testing and hostile attack simulations.

Active Directory certificate abuse.