Take it like a gift

sponsor

Collect and maintain internet-wide assets data for public Bug Bounty programs.

Pastebin OSINT harvester.

A certificate transparency log keyword sniffer written in Python.

Drupal enumeration & exploitation tool.

A tool to hunt for credentials in GitHub wild AKA git*hunt.

A web app for encryption, encoding, compression and data analysis.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

Reconnaissance tool for GitHub organizations.

Threat framework to research security gaps in GraphQL implementations.

May be used to extract various credentials from running processes.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

Multi threaded application designed to brute force paths on web servers.

The Deepfake Offensive Toolkit.

Java decompiler, assembler, and disassembler.

A golang, web screenshot utility using Chrome Headless.