Take it like a gift

Obtain GraphQL API Schema even if the introspection is not enabled.

Static analysis framework built in house to do security vetting for Android applications.

A CLI tool to extract server certificates.

An extensible multilanguage static code analyzer.

An automated S3-compatible bucket inspector.

Assessment tool that allows penetration testing and hostile attack simulations.

Beautifier for JavaScript.

Targeted attacks against WPA2-Enterprise networks, wireless pivots using hostile portal attacks.

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

Automated security reporting from markdown templates.

Windows reverse shell payload generator and handler that abuses the http(s) protocol.

Takes a list of IP addresses then does a series of checks to return associated domain names.

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Fetches latest bug bounty programs from many platforms and consolidates them in one place.

Small tool to capture packets from wlan devices.