Secrets detection for your GitHub, GitLab and Bitbucket repositories.
Command line utility for searching and downloading exploits.
Tool to bypass 40X response codes.
DS_Store file parser/viewer.
Advanced Google searches using dorks to locate specific files on the internet.
The Deepfake Offensive Toolkit.
A tool to monitor for potential spear phishing domains and send to Slack.
Perform permutations, mutations and alteration of subdomains.
The leading security assessment framework for Android.
Automatically coerce a Windows server to authenticate on an arbitrary machine.
Discover new target domains using Content Security Policy.
LSASS memory dumper using direct system calls and API unhooking.
DOM XSS scanner for Single Page Applications.
Domain name permutation engine written in Go.
Recovers passwords from pixelized screenshots.