Take it like a gift

go-stare
go-stare

A fast & light web screenshot without headless browser but Chrome DevTools protocol.

mssqlproxy
mssqlproxy

Perform lateral movement in restricted environments through a compromised MSSQL Server.

keyhacks.sh
keyhacks.sh

Automation of tokens/api keys testing.

FireBounty
FireBounty

The ultimate Vulnerability Disclosure Policy and Bug Bounty list!

falco
falco

Cloud native runtime security.

flan
flan

A pretty sweet vulnerability scanner.

FOCA
FOCA

Tool to find metadata and hidden information in the documents.

John Hammond
John Hammond

John Hammond YouTube channel.

skipfish
skipfish

Active web application security reconnaissance tool.

h8mail
h8mail

Powerful and user-friendly password hunting tool.

Kadimus
Kadimus

Check for and exploit LFI vulnerabilities with a focus on PHP systems.

Faraday security
Faraday security

Open source sulnerability management and orchestration platform.

mitmAP
mitmAP

A python program to create a fake AP and sniff data.

is-website-vulnerable
is-website-vulnerable

Finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.

prototype-pollution-exploits
prototype-pollution-exploits

Prototype Pollution exploits collection.