Take it like a gift

Java decompiler, assembler, and disassembler.

Find CVEs that don't have a Detectify modules.

Evaluate user privileges in web applications across a list of URLs.

Unix binaries that can be used to bypass local security restrictions in misconfigured systems.

A DNS database debugger.

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Subdomain takeover tool for attackers, bug bounty hunters and the blue team!

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

The Deepfake Offensive Toolkit.

Interactive .NET SQL console client with enhanced SQL Server discovery/access/exfiltration features.

Helps to bypass antiviruses by providing an encryption wrapper and loader for your shellcode.

Scans the top 500 sites daily for their security.txt file or DNS records.

Whois command implemented by golang with awesome whois servers list.

Script that makes active and/or passive scan to obtain subdomains and search for open ports.