Take it like a gift

Dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard.

Burp extension to decode NTLM SSP headers and extract domain/host information.

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

Distribute the workload of many different scanning tools with ease.

Extends Burp Suite's active and passive scanning capabilities.

Full-fledged phishing framework to manage all phishing engagements.

Checks whether Kubernetes is deployed according to security best practices.

Gives root access on remote docker containers that expose their APIs.

Scans the top 500 sites daily for their security.txt file or DNS records.

Open-source phishing toolkit.

Image metadata library and tools.

Collect, categorize and highlight requests and/or responses according to their content.

Simple JWT token brute force cracker.

Zip password cracker.

Software reverse engineering (SRE) framework.