Take it like a gift

Go shellcode loader that combines multiple evasion techniques.

A (partial) Python rewriting of PowerSploit's PowerView.

Scripting engine to interact with a graphql endpoint for pentesting purposes.

Command line utility for searching and downloading exploits.

Perform automated network reconnaissance scans to gather network intelligence.

Highly configurable script for dictionary/spray attacks against online web applications.

The AWS Cloud Post Exploitation framework!

The Deepfake Offensive Toolkit.

Find subdomains on GitHub.

An easy way for penetration testers and bug bounty hunters to test (blind) XSS.

Post-exploitation framework designed to assist with lateral movement within Active Directory.

Android application identifier for packers, protectors, obfuscators and oddities.

Route53/CloudFront Vulnerability assessment utility.

Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.

Tool for automating customized attacks against web applications.