Take it like a gift

A handy SMB enumeration tool.

Default passwords database sorted by manufacturers.

Get Active Directory security at 80% in 20% of the time.

Rapidly search through troves of public data on GitHub for sensitive secrets.

PortSwigger XSS cheat sheet that contains many vectors that can help you bypass WAFs and filters.

Standalone script to enumerate SUID binaries, separate default binaries from customs.

Improve the test coverage during web application penetration tests on J2EE applications.

Brute discover GET and POST parameters.

Stalk your friends on social media using image recognition and reverse image search.

Allows you to intercept and edit HTTP/HTTPS requests and responses.

The Prime Cross Site Request Forgery Audit and Exploitation Toolkit.

A simple CORS misconfiguration scanner.

Intelligence tool to do OSINT tasks and more but without any API key.

A CLI tool to extract server certificates.

Collaborative forensic timeline analysis.