Take it like a gift

A tool for testing for certificate validation vulnerabilities of TLS connections.

PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API.

Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

Helps you to detect SQL injection "Error based" by sending multiple requests.

Android and Java bytecode viewer.

An intentionally vulnerable web API game for learning and training purposes.

A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation.

Attack Surface Management Platform.

An HTTP Request Smuggling / Desync testing tool.

Tool for automating the search for IDOR vulnerabilities in web applications and APIs.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files.

Second-order subdomain takeover scanner.

Simple and flexible tool for managing secrets.

Passive enumeration utility For Android applications.

The AWS Cloud Post Exploitation framework!