Take it like a gift

Cr3dOv3r
featured
Cr3dOv3r

Know the dangers of credential reuse attacks.

Namechk
Namechk

Check usernames on more than 100 websites, forums and social networks.

XSS'OR
XSS'OR

Hack with JavaScript.

MSOLSpray
MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365).

JOSEPH
JOSEPH

JavaScript Object Signing and Encryption Pentesting Helper.

mentalist
mentalist

Graphical tool for custom wordlist generation.

Argus-SAF
Argus-SAF

Static analysis framework built in house to do security vetting for Android applications.

PortBender
PortBender

A TCP port redirection utility that allows inbound traffic redirection.

Scavenger
Scavenger

Burp Suite extension to create target specific and tailored wordlist from burp history.

AWSGoat
AWSGoat

A damn vulnerable AWS infrastructure.

Patator
Patator

Multi-purpose brute-forcer, with a modular design and a flexible usage.

Astra
Astra

Automated Security Testing For REST API's.

archerysec
archerysec

Automate your application security orchestration and correlation (ASOC).

awesome-cve-poc
awesome-cve-poc

A collection about Proof of Concepts of Common Vulnerabilities and Exposures.

B-XSSRF
B-XSSRF

Toolkit to detect and keep track on Blind XSS, XXE & SSRF.