Take it like a gift

Fast and customizable vulnerability scanner based on simple YAML based DSL.

A vulnerable Android application with an interface to test your mobile hacking skills.

DNS Enumeration Script.

Active Directory Certificate Services enumeration and abuse.

Custom word list generator redefined, based on the Scrapy framework.

Spoof SSDP replies to phish for credentials and NetNTLM challenge/response.

Checks and hardens your Windows configuration.

A fast and minimal JS endpoint extractor.

Find origin servers of websites behind Cloudflare by using Internet-wide scan data from Censys.

Designed to enumerate and gain access to IP cameras via RTSP.

An enterprise friendly way of detecting and preventing secrets in code.

Enumerate data from Windows and Samba hosts.

Probe endpoints consuming Java serialized objects for fingerprinting.

Find web directories without bruteforce.

Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.