A tool to find subdomains and interesting things hidden inside.
A little toolbox to play with Microsoft Kerberos in C.
List of awesome CobaltStrike resources.
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan.
Collect and maintain internet-wide assets data for public Bug Bounty programs.
Tool for automating customized attacks against web applications.
A tool for testing for certificate validation vulnerabilities of TLS connections.
HTTP proxy / monitor / reverse proxy that allows to view all of the HTTP(S) traffic.
The most powerful CRLF injection scanner.
A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities.
Yet another subdomain finder.
Fully automated WPA PSK PMKID and handshake capture script.
Try to find the origin IP of a webapp protected by Cloudflare.
OSINT tool used for web crawling or examining JavaScript files for likely useful data.
Toolkit to detect and keep track on Blind XSS, XXE & SSRF.
