Take it like a gift

Prevents you from committing secrets and credentials into git repositories.

Google Dork File Finder.

Free, accessible, and platform-independent decompilation service.

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities.

A damn vulnerable AWS infrastructure.

An automated tool that automatically scanning a list of multiple websites with wordpress at once.

AntiVirus Evasion Tool.

Scrape domain names from SSL certificates of arbitrary hosts.

Just a quick inventory, reminder and launcher for pentest commands.

Enumerate s3 buckets for a specific target.

Burp Extension for a passive scanning JS files for endpoint links.

In-depth Attack Surface Mapping and Asset Discovery.

Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.

A one-stop pentesting checklist and logger tool.

Scans the history of GitHub repositories to find sensitive things.