Take it like a gift

Try to find the origin IP of a webapp protected by Cloudflare.

It's the C version of sshLooter.

Find misconfiguration through LDAP to exploit weaknesses with Kerberos.

Small and highly portable detection tests based on MITRE's ATT&CK.

Get informations about SSL certificates.

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

Unix binaries that can be used to bypass local security restrictions in misconfigured systems.

Framework for monitoring and tampering system API calls of native macOS, iOS and android apps.

Find domains and subdomains related to a given domain.

A vulnerability scanning tools for penetration testing.

Database protection suite with field level encryption and intrusion detection.

Self-deployable file hosting service allowing to easily upload and share payloads over HTTP and WebD.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

Force any TCP connection made by any given application to follow through proxy.

Authentication Token Obtain and Replace Extender.