Take it like a gift

An automated SSRF finder. Just give the domain name and your server and chill!

The only cheat sheet you need.

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware.

Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.

Burp Suite extension to pull employee names from Google and Bing LinkedIn search results.

Scrape domain names from SSL certificates of arbitrary hosts.

Automated security reporting from markdown templates.

Attack patterns and primitives for black-box application fault injection and resource discovery.

Software reverse engineering (SRE) framework.

Create a copy of a targeted website with CDN and WAF restrictions disabled.

bXSS is a utility which can be used identify Blind Cross-Site Scripting.

Burp extension to decode NTLM SSP headers and extract domain/host information.

An automated S3-compatible bucket inspector.

A JavaScript Engine Fuzzer.

Web debugging proxy for MacOS, Windows, and Linux.