Take it like a gift

A dynamic binary analysis library.

Damn vulnerable cloud application.

Open-source phishing toolkit.

Command line tool for testing CRLF injection on a list of domains.

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Python wordlist-based DNS subdomain scanner.

A tool for extracting all the possible endpoints from the JS files.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

The AWS Cloud Post Exploitation framework!

Offensive Google framework.

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Custom word list generator redefined, based on the Scrapy framework.

Static analysis framework built in house to do security vetting for Android applications.

Tool used for harvesting information from GitHub.

Automated tool for testing header based blind SQL injection.