Take it like a gift

PortSwigger XSS cheat sheet that contains many vectors that can help you bypass WAFs and filters.

Leak git repositories from misconfigured websites.

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks.

A tool to make socks connections through HTTP agents.

Enumerate information from NTLM authentication enabled web endpoints.

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.

A Python Framework For NoSQL Scanning and Exploitation.

Free web-application vulnerability and version scanner.

A password spraying tool for Microsoft Online accounts (Azure/O365).

Cross-platform post-exploitation HTTP/2 Command & Control server and agent.

This repository contains the scanner component for Greenbone Community Edition.

Self-deployable file hosting service allowing to easily upload and share payloads over HTTP and WebD.

The first ever CLI based menu-driven web application B-Tier recon framework.

Allow users to route Internet traffic through Tor and hide their real IP address.

This tool extracts secrets from a pcap file or from a live interface.