Take it like a gift

Helps to identify IoT related dashboards and scan them for default passwords.

Spoof SSDP replies to phish for credentials and NetNTLM challenge/response.

An automated SSRF finder. Just give the domain name and your server and chill!

OSINT tool for finding Github repositories by extracting commit logs in real time.

Modern tool for Windows kernel exploration and tracing with a focus on security.

Graphql introspection query analyzer.

DNS traffic sniffer and analyzer.

Custom word list generator redefined, based on the Scrapy framework.

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

A Burp Suite extension made to automate the process of bypassing 403 pages.

Small, fast tool for performing reverse DNS lookups en masse.

Gather information about the Active Directory and generates a report.

Complete suite of tools to assess WiFi network security.

Windows reverse shell payload generator and handler that abuses the http(s) protocol.

Enumerate Google Storage buckets, check the access and if they can be privilege escalated.