Take it like a gift

sponsor

Enumerate valid subdomains using active bruteforce and DNS resolution.

Fast subdomains enumeration tool for penetration testers.

Escalate a Cross-Site Scripting vulnerability to Remote Code Execution in WordPress.

Post-exploitation tools to gather credentials from various password managers and Windows utilities.

SecretFinder is a script based on LinkFinder, written to find sensitive data in JavaScript files.

An automated phishing tool with 30+ templates.

Perform subdomain enumeration through various techniques and retrieve detailed output.

A simple wireless networks penetration testing toolkit.

ScriptSentry finds misconfigured and dangerous logon scripts.

Plugin-based tool to scan public version control systems for sensitive information.

Secrets detection for your GitHub, GitLab and Bitbucket repositories.

Reverse shell based on sshd supporting DNS and ICMP tunnelling as well as HTTP and Socks proxies.

Find secrets in file and secret files among the SMB target shares.

Identifies server-side prototype pollution vulnerabilities.

Simple XSS Scanner tool.