Take it like a gift

sponsor

Fast and customizable subdomain wordlist generator using DSL.

A burpsuite extension to find security reports published on HackerOne based on the selected host.

bXSS is a utility which can be used identify Blind Cross-Site Scripting.

Exfiltrate files from a target's Google Drive that you have access to, via Google's API.

Distribution for pentesting IoT devices.

Take a list of domains and probe for working HTTP and HTTPS servers.

SQL injection script for Microsoft SQL Server.

An OSINT tool to investigate GitHub profiles.

Quickly do keyword searches over GitLab and GitHub for OSINT & bug bounty recon.

This is a multi-use bash script for Linux systems to audit wireless networks.

Offensive Google framework.

A Burp Suite extension to find potential endpoints and parameters.

A tool to perform local searches for known vulnerabilities.

Fast web fuzzer written in Go.

Find critical backup files by creating a dynamic wordlist based on the domain.