Take it like a gift

dorky
dorky

Quickly do keyword searches over GitLab and GitHub for OSINT & bug bounty recon.

4-ZERO-3
4-ZERO-3

403/401 Bypass Methods.

curate
curate

A tool for fetching archived URLs.

BurpSuiteHTTPSmuggler
BurpSuiteHTTPSmuggler

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

IPRotate
IPRotate

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

demovfuscator
demovfuscator

A work-in-progress deobfuscator for movfuscated binaries.

Certify
Certify

Active Directory certificate abuse.

boofuzz
boofuzz

Network protocol fuzzing for humans.

DNSTracer
DNSTracer

Trace the path of a DNS query.

AttifyOS
AttifyOS

Distribution for pentesting IoT devices.

Hash Muncher
Hash Muncher

Grab NetNTLMv2 hashes using ETW with administrative rights on Windows.

DotDotPwn
DotDotPwn

The Directory Traversal Fuzzer.

House
House

A runtime mobile application analysis toolkit with a Web GUI.

Evilginx3
Evilginx3

Standalone MITM attack framework allowing for the bypass of 2-factor authentication.

afrog
afrog

A vulnerability scanning tools for penetration testing.