Swiss Army knife Proxy tool for HTTP(S) traffic capture, manipulation, and replay on the go.
IIS shortname scanner written in Go.
Morphing Cobalt Strike's evil.HTA.
Offensive Security Youtube channel.
All-in-one AWS S3 bucket tool.
Second-order subdomain takeover scanner.
The Modern Port Scanner. Fast, smart, effective.
Virtual machine for adversary emulation and threat hunting.
Active Directory data collector for BloodHound written in Rust.
Brute discover GET and POST parameters.
OSINT tool aimed at reducing the time spent harvesting information from open sources.
An interactive shell to perform analysis on Instagram account of any users by its nickname.
A multi-platform fuzzer for poking at userland binaries and servers.
A security toolkit for Amazon S3.
Burp Suite extension to help developers replicate findings from pentests.