Take it like a gift

A powerful shell script to maximize the recon and data collection process.

DS_Store file parser/viewer.

Subdomain takeover vulnerability checker.

All-in-one OSINT tool for analysing any website.

Allows searching on URLs that are exposed via shortener services.

Monitor GitHub to search and find sensitive data in real time.

Android remote administration tool.

Collection of scanner checks missing in Burp.

Mifare classic offline cracker.

A legitimate website that tunnels client/server communications for covert command execution.

Burp Suite plugin to detect current and discover new WSDL files.

Fast, thorough, XSS/SQLi spider.

A multi-platform fuzzer for poking at userland binaries and servers.

Vulnerability scanner based on vulners.com search API.

Directory/File, DNS and VHost busting tool written in Go.