Take it like a gift

Exfiltrate files from a target's Google Drive that you have access to, via Google's API.

Phishing Campaign Toolkit.

List of awesome CobaltStrike resources.

Validate the outgoing changeset for things that look suspicious such as tokens, passwords and keys.

Chrome extension that finds DOM based XSS vulnerabilities.

Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Burp Extender API.

Scope gathering tool for multiple Bug Bounty platforms.

Create SSL client fingerprints in an easy to produce and shareable way.

Check for dozens of common best-practices around deploying Docker containers in production.

Pull secrets from an AWS environment.

Fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.

Gather all companies acquired by a given company domain name.

Prevent cloud misconfigurations and find vulnerabilities during build-time.

A customized command and control center for red team and adversary simulation.